1223 matches found
CVE-2015-7784
CVE-2015-7784 affects EC-CUBE via the BbAdminViewsControl213 plugin (versions before 1.1) and BbAdminViewsControl plugin (versions before 2.1). The vulnerability is an SQL injection (CWE-89) that allows a logged-in, remote, authenticated attacker to execute arbitrary SQL commands via unspecified ...
CVE-2015-7784: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the BOKUBLOCK 1 BbAdminViewsControl213 plugin before 1.1 and 2 BbAdminViewsControl plugin before 2.1 for EC-CUBE allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...
EC-CUBE plugin BbAdminViewsControl vulnerable to SQL injection
Overview BbAdminViewsControl from BOKUBLOCK CO., LTD. is an EC-CUBE plugin. BbAdminViewsControl contains an SQL injection vulnerability CWE-89. Gen Sato of TRADE WORKS Co.,Ltd. Security Dept. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security...
JVN#55545372: EC-CUBE plugin BbAdminViewsControl vulnerable to SQL injection
BbAdminViewsControl from BOKUBLOCK CO., LTD. is an EC-CUBE plugin. BbAdminViewsControl contains an SQL injection vulnerability CWE-89. Impact A logged in attacker may execute SQL statements. According to the developer, this vulnerability affects availability of the server that EC-CUBE resides, bu...
CVE-2015-6343
The SIP implementation in Cisco IOS 15.53M on Cisco Unified Border Element CUBE devices allows remote attackers to cause a denial of service via crafted SIP messages, aka Bug ID CSCuv79202...
CVE-2015-6343: Undefined Security Weakness
The SIP implementation in Cisco IOS 15.53M on Cisco Unified Border Element CUBE devices allows remote attackers to cause a denial of service via crafted SIP messages, aka Bug ID CSCuv79202...
LOCKON EC-CUBE Cross-Site Request Forgery Vulnerability (CNVD-2015-07298)
LOCKON EC-CUBE is an open source e-commerce website building platform developed by Japan LOCKON Co. A cross-site request forgery vulnerability exists in LOCKON EC-CUBE versions 2.11.0 through 2.13.3. It allows remote attackers to hijack arbitrary users to write PHP scripts and arbitrary user...
CVE-2015-5665
Cross-site request forgery CSRF vulnerability in LOCKON EC-CUBE 2.11.0 through 2.13.3 allows remote attackers to hijack the authentication of arbitrary users for requests that write to PHP scripts, related to the doValidToken function...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in LOCKON EC-CUBE 2.11.0 through 2.13.3 allows remote attackers to hijack the authentication of arbitrary users for requests that write to PHP scripts, related to the doValidToken function...
CVE-2015-5665
Cross-site request forgery CSRF vulnerability in LOCKON EC-CUBE 2.11.0 through 2.13.3 allows remote attackers to hijack the authentication of arbitrary users for requests that write to PHP scripts, related to the doValidToken function...
CVE-2015-5665
LOCKON EC-CUBE is affected by a CSRF vulnerability (CWE-352) affecting versions 2.11.0 through 2.13.3 (some sources list up to 2.13.4). The flaw enables an attacker to hijack the authentication of arbitrary users by inducing requests that write to PHP scripts, tied to the doValidToken function. I...
CVE-2015-5665: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in LOCKON EC-CUBE 2.11.0 through 2.13.3 allows remote attackers to hijack the authentication of arbitrary users for requests that write to PHP scripts, related to the doValidToken function...
PT-2015-7024
Name of the Vulnerable Software and Affected Versions LOCKON EC-CUBE versions 2.11.0 through 2.13.3 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of arbitrary users for requests that write to PHP scripts, related to the doValidToken...
EC-CUBE vulnerable to cross-site request forgery
Overview EC-CUBE from LOCKON CO.,LTD. is an open source system for creating shopping websites. EC-CUBE contains a cross-site request forgery vulnerability CWE-352. Gen Sato of TRADE WORKS Co.,Ltd. Security Dept. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under...
JVN#97278546: EC-CUBE vulnerable to cross-site request forgery
EC-CUBE from LOCKON CO.,LTD. is an open source system for creating shopping websites. EC-CUBE contains a cross-site request forgery vulnerability CWE-352. Impact If a user views a malicious page, arbitrary PHP code may be executed on the server. Solution Update or apply the patch Update to the...
CVE-2014-9134
Unrestricted file upload vulnerability in Huawei Honor Cube Wireless Router WS860s before V100R001C02B222 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via unspecified vectors...
Unrestricted file upload
Unrestricted file upload vulnerability in Huawei Honor Cube Wireless Router WS860s before V100R001C02B222 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via unspecified vectors...
CVE-2014-9134
Huawei Honor Cube Wireless Router WS860s (before V100R001C02B222) has an Unrestricted file upload vulnerability (CVE-2014-9134) that enables remote attackers to execute arbitrary code by uploading a file with an executable extension and then accessing it via unspecified vectors. The advisory HWPS...
CVE-2014-9134: Undefined Security Weakness
Unrestricted file upload vulnerability in Huawei Honor Cube Wireless Router WS860s before V100R001C02B222 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via unspecified vectors...
IPUX CS7522CS2330CS2030 IP Camera - UltraHVCamX.ocx ActiveX Stack Buffer Overflow
IPUX CS7522CS2330CS2030 IP Camera - UltraHVCamX.ocx ActiveX Stack Buffer Overflow IPUX CS7522/CS2330/CS2030 IP Camera UltraHVCamX.ocx ActiveX Stack Buffer Overflow Vendor: Big Good Holdings Limited | Fitivision Technology Inc. Product web page: http://www.ipux.net | http://www.fitivision.com...