CVE-2008-2053

CVE-2008-2053 affects Cisco Unified Customer Voice Portal (CVP) software. A vulnerability allows an administrator-level user to create, modify, or delete a superuser account, effectively gaining full system control. Affected CVP releases are 4.0.x before 4.0(2)_ES14, 4.1.x before 4.1(1)_ES11, and...

CVE-2008-2053

Unspecified vulnerability in Cisco Unified Customer Voice Portal CVP 4.0.x before 4.02ES14, 4.1.x before 4.11ES11, and 7.x before 7.01 allows remote authenticated users with administrator role privileges to create, modify, or delete a superuser account...

Cisco Security Advisory: Cisco Voice Portal Privilege Escalation Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Voice Portal Privilege Escalation Vulnerability Advisory ID: cisco-sa-20080521-cvp http://www.cisco.com/warp/public/707/cisco-sa-20080521-cvp.shtml Revision 1.0 For Public Release 2008 May 21 1600 UTC GMT Summary =======...

Yayoi Kaikei improper handling of credential information

Overview Yayoi Kaikei Quick Navigator sends user credentials unencrypted. Yayoi Kaikei Quick Navigator makes the user log into the vendor's server, and sends the user credentials unencrypted. Impact By monitoring the communication between Quick Navigator and the vendor's server, an attacker can...

ZDI-08-025: Symantec Altiris Deployment Solution Domain Credential Disclosure Vulnerability

ZDI-08-025: Symantec Altiris Deployment Solution Domain Credential Disclosure Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-025 May 15, 2008 -- Affected Vendors: Symantec -- Affected Products: Symantec Altiris Deployment Solution -- TippingPointTM IPS Customer Protection:...

Unfixed XSS vulnerability at www.ice.com

Security researcher C1c4Tr1Z, has submitted on 29/04/2008 a cross-site-scripting XSS vulnerability affecting www.ice.com, which at the time of submission ranked 22152 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/06/2008. It is currently...

Simple Customer 1.2 (contact.php id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ Simple Customer 1.2 contact.php id SQL Injection Vulnerability ================================================================...

Simple Customer 1.2 - 'contact.php' SQL Injection

--==+================================================================================+==-- --==+ Simple Customer 1.2 SQL Injection Vulnerabilitys +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz Discovered On: 18 April 2008...

[SECURITY] Fedora 7 Update: otrs-2.1.5-4.fc7

OTRS is an Open source Ticket Request System also well known as trouble ti cket system with many features to manage customer telephone calls and e-mails. The system is built to allow your support, sales, pre-sales, billing, internal IT, helpdesk, etc. department to react quickly to inbound...

It's possible to browse project names when using Issue Security Scheme.

A customer user is set up and only allowed to see "External" issues. - The user is added as project role "Customers" in project "X". - The project got Issue Security Scheme "Customers". Internal / External When logging in as the customer user, you can only see the External issues within this...

It's possible to browse project names when using Issue Security Scheme.

A customer user is set up and only allowed to see "External" issues. - The user is added as project role "Customers" in project "X". - The project got Issue Security Scheme "Customers". Internal / External When logging in as the customer user, you can only see the External issues within this...

CVE-2007-6711

Unspecified vulnerability in customer.php in FreeWebshop.org 2.2.5, 2.2.6 and 2.2.7WIP1/2 allows remote attackers to gain administrator privileges via unknown vectors...

PHP Live! <= 3.2.2 (questid) Remote SQL Injection Vulnerability

No description provided by source. !Info! PHP Live! 漏 OSI Codes Inc. enables live help and live customer support communication directly from your website. With PHP Live!, you can provide one-on-one chat assistance in real-time, answer visitor questions and add that extra human touch to your...

PHP Live! 3.2.2 - questid SQL Injection (1)

PHP Live! 3.2.2 - questid SQL Injection 1 !Info! PHP Live! © OSI Codes Inc. enables live help and live customer support communication directly from your website. With PHP Live!, you can provide one-on-one chat assistance in real-time, answer visitor questions and add that extra human touch to yo...

PHP Live! 3.2.2 - 'questid' SQL Injection (1)

!Info! PHP Live! © OSI Codes Inc. enables live help and live customer support communication directly from your website. With PHP Live!, you can provide one-on-one chat assistance in real-time, answer visitor questions and add that extra human touch to your website. !SQL Injection! Code:...

ZDI-08-006: Microsoft Internet Explorer SVG animateMotion.by Code Execution Vulnerability

ZDI-08-006: Microsoft Internet Explorer SVG animateMotion.by Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-006.html February 12, 2008 -- CVE ID: CVE-2008-077 -- Affected Vendor: Microsoft -- Affected Products: Internet Explorer 6 Internet Explorer 7 --...

osCommerce Customer Testimonials customer_testimonials.php testimonial_id Parameter SQL Injection

The remote host is running Customer Testimonials, a third-party addon for the open source e-commerce system osCommerce. The version of Customer Testimonials installed on the remote host fails to sanitize user input to the 'testimonialid' parameter of the 'customertestimonials.php' script before...

Sql injection

SQL injection vulnerability in customertestimonials.php in the Customer Testimonials 3 and 3.1 Addon for osCommerce Online Merchant 2.2 allows remote attackers to execute arbitrary SQL commands via the testimonialid parameter...

CVE-2008-0719

SQL injection vulnerability in customertestimonials.php in the Customer Testimonials 3 and 3.1 Addon for osCommerce Online Merchant 2.2 allows remote attackers to execute arbitrary SQL commands via the testimonialid parameter...

CVE-2008-0719

The CVE-2008-0719 entry describes an SQL injection vulnerability in the customer_testimonials.php script of the osCommerce Customer Testimonials 3 and 3.1 Addon for osCommerce Online Merchant 2.2. The flaw allows remote attackers to manipulate database queries via the testimonial_id parameter, po...