Cross site scripting

Cross-site scripting XSS vulnerability in IBM InfoSphere Master Data Management - Collaborative Edition 10.0 and 10.1 before FP1 and InfoSphere Master Data Management Server for Product Information Management 6.0, 9.0, and 9.1 allows remote authenticated users to inject arbitrary web script or HT...

CVE-2013-0478

The CVE-2013-0478 entry describes an XSS vulnerability in IBM InfoSphere Master Data Management – Collaborative Edition (versions 10.0 and 10.1 before FP1) and InfoSphere Master Data Management Server for Product Information Management (versions 6.0, 9.0, 9.1). The flaw allows remote authenticate...

PT-2013-2371

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Master Data Management - Collaborative Edition versions 10.0 through 10.1 before FP1 IBM InfoSphere Master Data Management Server for Product Information Management versions 6.0 through 9.1 Description The issue allows remote...

CVE-2013-0477: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in IBM InfoSphere Master Data Management - Collaborative Edition 10.0 and 10.1 before FP1 and InfoSphere Master Data Management Server for Product Information Management 6.0, 9.0, and 9.1 allow remote authenticated users to inject content, and...

PT-2013-2372

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Master Data Management - Collaborative Edition versions 10.0 through 10.1 before FP1 IBM InfoSphere Master Data Management Server for Product Information Management versions 6.0 through 9.1 Description A cross-site scripting XSS...

CVE-2013-0478: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM InfoSphere Master Data Management - Collaborative Edition 10.0 and 10.1 before FP1 and InfoSphere Master Data Management Server for Product Information Management 6.0, 9.0, and 9.1 allows remote authenticated users to inject arbitrary web script or HT...

HCAMindbox CMS SQL Injection

Exploit Title: HCAMindbox cms Sql Injection Vulnerability Google Dork: Intext:"powered by Data Management Products" Date: 08/29/2012 Author: Crim3R Site : Http://Ajaxtm.com/ Vendor Home : http://www.hcamindbox.com/ Tested on: all ================================== + id parametr in page.php is...

DMPIndia CMS SQL Injection

Exploit Title: dmpindia cms Sql Injection Vulnerability Google Dork: Intext:"powered by Data Management Products" Date: 08/29/2012 Author: Crim3R Site : Http://Ajaxtm.com/ Vendor Home : http://www.dmpindia.com/ Tested on: all ================================== + id parametr in newsdetail.php is...

Survey Tracks Security's 'Bad Mood' Trend, Need for Improvement

The bulk of security teams face a relentless uphill battle when it comes to dealing with security risks and are sorely lacking when it comes to tracking, measuring and maintaining data access, according to new research. The majority of those interviewed in a survey published today, “The Buried...

Pro-Face Pro-Server EX Vulnerabilities

Overview This advisory is a follow-up to the alert titled “ICS-ALERT-12-137-01 Pro-face Pro-Server EX Vulnerabilities,” that was published May 16, 2012, on the ICS-CERT Web page. Independent researcher Luigi Auriemma identified multiple vulnerabilities in the Pro-face Pro-Server EX application an...

Samsung Data Management Server (Update B)

Overview This updated website posting provides new information regarding Samsung’s process for acquiring the updated software to mitigate the reported vulnerability. José A. Guasch,http://www.SecurityByDefault.com reported a SQL injection vulnerability in the Samsung Data Management Server DMS...

EViews 7.0.0.1 (aka 7.2) - Multiple Vulnerabilities

Luigi Auriemma Application: EViews http://www.eviews.com Versions: = 7.0.0.1 aka 7.2 Platforms: Windows Bugs: A memory corruption B heap overflow Exploitation: remote Date: 19 Sep 2011 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bugs 3 The Code 4 Fix...

HP Data Protector Installed (Windows) (credentialed check)

HP Data Protector, or HP OpenView Storage Data Protector as it was formerly known, a data management solution, is installed on the remote Windows host. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid55550; scriptversion"1.13";...

Samsung Data Management Server < 1.4.3 verifyUser Method SQL Injection

Binary data scadasamsungdms143.nbin...

Samsung Data Management Server Default Password (rkwjsdusrnth) for 'root' Account

Binary data scadasamsungdmsaccountrootrkwjsdusrnth.nbin...

Samsung Data Management Server with Sql Injection Login Bypass vulnerability

Samsung Data Management Server with Sql Injection Login Bypass vulnerability Here we have one more example of human stupidity. Samsung Data Management Server with Sql Injection Login Bypass vulnerability . Anyone can easy hack into admin panel of server... here a screen shot of admin panel : Sorr...

CVE-2010-4284

SQL injection vulnerability in the authentication form in the integrated web server in the Data Management Server DMS before 1.4.3 in Samsung Integrated Management System allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-4284

SQL injection vulnerability in the authentication form in the integrated web server in the Data Management Server DMS before 1.4.3 in Samsung Integrated Management System allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-4284: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the authentication form in the integrated web server in the Data Management Server DMS before 1.4.3 in Samsung Integrated Management System allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2011-1491

Name of the Vulnerable Software and Affected Versions Samsung Integrated Management System Data Management Server DMS versions prior to 1.4.3 Description The issue allows remote attackers to execute arbitrary SQL commands via unspecified vectors in the authentication form of the integrated web...