12 matches found
EUVD-2011-3949
Malware in sbrugna...
EUVD-2014-2388
Malware in sbrugna...
CSWorks Software Framework SQL Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of CSWorks. Authentication is not required to exploit this vulnerability. The specific flaw exists within the data source templating. CSWorks does not properly sanitize or validate the data used to...
CVE-2014-2351
SQL injection vulnerability in the LiveData service in CSWorks before 2.5.5233.0 allows remote attackers to execute arbitrary SQL commands via vectors related to pathnames contained in web API requests...
Sql injection
SQL injection vulnerability in the LiveData service in CSWorks before 2.5.5233.0 allows remote attackers to execute arbitrary SQL commands via vectors related to pathnames contained in web API requests...
CVE-2014-2351 CSWorks SQL Injection
SQL injection vulnerability in the LiveData service in CSWorks before 2.5.5233.0 allows remote attackers to execute arbitrary SQL commands via vectors related to pathnames contained in web API requests...
CVE-2014-2351
CSWorks software framework vulnerability (CVE-2014-2351) affects the CSWorks LiveData service before version 2.5.5233.0. The flaw arises from improper handling of data used to construct read/write paths in web API requests, enabling SQL injection. References indicate that remote attackers could p...
CVE-2011-3996
The LiveData Service in CSWorks before 2.0.4115.1 allows remote attackers to cause a denial of service service crash via crafted TCP packets...
Code injection
The LiveData Service in CSWorks before 2.0.4115.1 allows remote attackers to cause a denial of service service crash via crafted TCP packets...
CVE-2011-3996
The LiveData Service in CSWorks before 2.0.4115.1 allows remote attackers to cause a denial of service service crash via crafted TCP packets...
CVE-2011-3996
The vulnerability CVE-2011-3996 affects CSWorks LiveData Service. Reports confirm that LiveData Service, a server component of CSWorks, is vulnerable to DoS caused by processing crafted TCP packets, leading to a service crash. Affected products/versions include CSWorks 2.0.4115.0 and earlier, wit...
JVN#98649286: CSWorks LiveData Service vulnerable to denial-of-service (DoS)
LiveData Service, a server component of CSWorks, contains an issue when processing TCP packets, which may lead to a denial-of-service DoS. Impact A remote attacker may be able to cause a denial-of-service DoS. Solution Update the software Update to the latest version according to the information...