2660 matches found
Oracle Business Intelligence Mobile App Designer UIXCacheResourceServlet Information Disclosure Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Business Intelligence Mobile App Designer. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UIXCacheResourceServlet servlet. The issue lies i...
Directory traversal
Directory traversal vulnerability in Reportico PHP Report Designer before 4.0 allows remote attackers to read arbitrary files via a .. dot dot in the xmlin parameter...
CVE-2014-3777
CVE-2014-3777 affects Reportico PHP Report Designer before 4.0. A directory traversal flaw allows an attacker to read arbitrary files via the xmlin parameter (.. traversal). Multiple connected sources confirm the vulnerable component is the Reportico web UI, with the root cause in the xmlin handl...
PHP DB Designer <= 1.02 Remote File Include Vulnerabilities
No description provided by source. PHP DB Designer = 1.02 Remote File Include Exploit D.Script: http://sourceforge.net/projects/phpdbdesigner/ Discovered by: GloDM = Mahmoodali Homepage: http://www.Tryag.cc Greetz To: Tryag-Team & 4lKaSrGoLd3n-Team & AsbMay's Group...
threedify designer 5.0.2 - Multiple Vulnerabilities
No description provided by source. ========================================= Vulnerability ID: HTB23021 Reference: http://www.htbridge.ch/advisory/threedifydesigneractivexcontrolinsecuremethod.html Product: ThreeDify Designer Vendor: ThreeDify http://www.threedify.com Vulnerable Version: 5.0.2 an...
Lattice Semiconductor PAC-Designer 6.21 - (.PAC) Exploit
No description provided by source. !/usr/bin/python -w ------------------------------------------------------------------------------------ Exploit: Lattice Semiconductor PAC-Designer 6.21 possibly all versions CVE: CVE-2012-2915 Author: b33f Ruben Boonen - http://www.fuzzysecurity.com/ OS: WinXP...
Luch Web Designer Multiple SQL Injection Vulnerabilities
No description provided by source. Title : Web Designed by LUCH Vulnerable to SQL Injection Vendor : http://www.luch.co.il Found by: p0pc0rn SQL --- http://site.com/page.asp?id=SQL http://site.com/cat.asp?catid=SQL http://site.com/catin.asp?productid=SQL POC --- http://site.com/page.asp?id=23 uni...
Lattice Semiconductor PAC-Designer 6.21 Symbol Value Buffer Overflow
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
Pre Studio Business Cards Designer SQL Injection
No description provided by source. =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Exploit Title: Pre Studio Business Cards Designer SQL Injection Vulnerability =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Author: drzig Date: 20-10-2011 Software Link:...
Microsoft SharePoint Designer Detection
Detects the installed version of Microsoft SharePoint Designer. The script logs in via smb, searches through the registry and gets the version and sets the KB. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
Microsoft SharePoint Designer Multiple Vulnerabilities (2952166)
This host is missing a critical security update according to Microsoft Bulletin MS14-022. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
MS14-022: Description of the security update for Microsoft SharePoint Designer 2013 (32-bit versions) (spd): May 13, 2014
None None...
MS14-022: Description of the security update for SharePoint Designer 2013: May 13, 2014
None None...
MS14-022: Description of the security update for SharePoint Designer 2010: May 13, 2014
None None...
MS14-022: Description of the security update for SharePoint Designer 2013 (spdcore): May 13, 2014
None None...
Lattice Semiconductor PAC-Designer Symbol Value Buffer Overflow - Ver2 (CVE-2012-2915)
A buffer overflow vulnerability has been reported in Lattice Semiconductor PAC-Designer. The vulnerability is due to the improper handling of validation of specially crafted pac files. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the...
SpagoBI 4.0 - Arbitrary XSS File Upload
Exploit for php platform in category web applications Introduction SpagoBI1 is an Open Source Business Intelligence suite, belonging to the free/open source SpagoWorld initiative, founded and supported by Engineering Group2. It offers a large range of analytical functions, a highly functional...
SpagoBI 4.0 - Arbitrary Cross-Site Scripting / Arbitrary File Upload
Advisory Information Title: XSS File Upload Date published: 2014-03-01 Date of last update: 2014-03-01 Vendors contacted: Engineering Group Discovered by: Christian Catalano Severity: Medium 02. Vulnerability Information CVE reference: CVE-2013-6234 CVSS v2 Base Score: 4 CVSS v2 Vector:...
Ektron 8.02 /WorkArea/ContentDesigner/ekajaxtransform.aspx 代码执行漏洞
No description provided by source...
SA-CONTRIB-2013-055 - Hatch - Cross Site Scripting
Hatch theme is a simple and minimal portfolio theme for photographers, illustrators, designers, or photobloggers. The theme didn't sufficiently escape user supplied text prior to printing them. This vulnerability is mitigated by the fact that an attacker must have a role with the permission...