Omnidocs SQL Injection

-------------------------------------------------------------------- Exploit Title: Omnidocs SQL injection Vulnerability Date: 10 Feb 2010 Author: thebluegenius Software Link: http://www.newgensoft.com/omnidocs.asp Version: All Tested on: Apache-Coyote/1.1 | JBoss CVE : NA...

Omnidocs SQL injection Vulnerability

Exploit for jsp platform in category web applications ==================================== Omnidocs SQL injection Vulnerability ==================================== -------------------------------------------------------------------- Exploit Title: Omnidocs SQL injection Vulnerability Date: 10 Fe...

Omnidocs - SQL Injection

-------------------------------------------------------------------- Exploit Title: Omnidocs SQL injection Vulnerability Date: 10 Feb 2010 Author: thebluegenius Software Link: http://www.newgensoft.com/omnidocs.asp Version: All Tested on: Apache-Coyote/1.1 | JBoss CVE : NA...

MediaWiki Language Option PHP Code Execution (CVE-2005-4031)

MediaWiki is a web-based enterprise collaboration platform developed in the PHP scripting language. The software is a set of CGI programs that are loaded and executed by an HTTP server. It typically runs as a document management system, or a knowledge base. The web content of a MediaWiki...

OpenDocMan 1.2.5 xss, SQL injection

Exploit for unknown platform in category web applications =================================== OpenDocMan 1.2.5 xss, SQL injection =================================== Security Advisory : Multiple vulnerabilities in OpenDocMan Overview -------------- OpenDocMan is a free document management system...

Microsoft SharePoint Server Detection

The remote web server is running SharePoint, a web interface for document management. As this interface is likely to contain sensitive information, make sure only authorized personel can log into this site C Tenable Network Security, Inc. include"compat.inc"; if description scriptid38157;...

Afian Local File Inclusion

Afian is an application that can add, in just minutes, powerful document management capabilities to any Web server. It provides an Web-based interface for documents residing on the Web server's file system. This software has a secutity hole allow attackers download any files if they know the path...

Sql injection

SQL injection vulnerability in login.php in Simple Document Management System SDMS 1.1.5 and 1.1.4, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the login parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from...

CVE-2008-6220

CVE-2008-6220 affects Simple Document Management System (SDMS) versions 1.1.5 and 1.1.4 (and possibly earlier). The vulnerability is a SQL injection in login.php that allows remote attackers to execute arbitrary SQL commands via the pass parameter. Root cause: unsanitized user input fed into a SQ...

CVE-2008-6220

SQL injection vulnerability in login.php in Simple Document Management System SDMS 1.1.5 and 1.1.4, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the pass parameter...

Simple Document Management System 1.1.4 SQL Injection Auth Bypass

No description provided by source. SDMS Simple Document Management System v1.1.4 SQL Injection Author: Yuri Program: SDMS Simple Document Management System Version: v1.1.4 and probably all older versions as well Website: http://sdms.cafuego.net/ How it works The login system is very insecure, thi...

sdms-sql.txt

SDMS Simple Document Management System v1.1.4 SQL Injection Author: Yuri Program: SDMS Simple Document Management System Version: v1.1.4 and probably all older versions as well Website: http://sdms.cafuego.net/ How it works The login system is very insecure, this is the code we are going to abuse...

Simple Document Management System 1.1.4 - Authentication Bypass

Simple Document Management System 1.1.4 - Authentication Bypass SDMS Simple Document Management System v1.1.4 SQL Injection Author: Yuri Program: SDMS Simple Document Management System Version: v1.1.4 and probably all older versions as well Website: http://sdms.cafuego.net/ How it works The login...

Simple Document Management System 1.1.4 - Authentication Bypass

SDMS Simple Document Management System v1.1.4 SQL Injection Author: Yuri Program: SDMS Simple Document Management System Version: v1.1.4 and probably all older versions as well Website: http://sdms.cafuego.net/ How it works The login system is very insecure, this is the code we are going to abuse...

Cross site scripting

Cross-site scripting XSS vulnerability in Nordicwind Document Management System NOAH before 3.2.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-3730

The CVE-2008-3730 entry documents a Cross-site scripting (XSS) vulnerability in Nordicwind Document Management System (NOAH) prior to version 3.2.2. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Affected product: Nordicwind NOAH (version before ...

CVE-2008-3730

Cross-site scripting XSS vulnerability in Nordicwind Document Management System NOAH before 3.2.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

[Full-disclosure] S21SEC-044-en:OpenDocMan Cross Site Scripting (XSS)

S21Sec Advisory - Title: OpenDocMan Cross Site Scripting XSS ID: S21sec-044-en Severity: Low History: 15.Apr.2008 Vulnerability discovered 16.Apr.2008 Vendor contacted 27.May.2008 Patch available Scope: Cross Site Scripting XSS Platforms: Any Author: Sergi Rosell [email protected] URL:...

Groupmax World Wide Web Desktop/BUNSHOKANRI(=DocumentManagement) Cross-Site Scripting Vulnerability

Overview A cross-site scripting vulnerability has been found in the Groupmax World Wide Web Desktop/BUNSHOKANRI =DocumentManagement. Impact A remote attacker could execute malicious scripts. Solution Please refer to the 'Vendor Information' section for official countermesure and take appropriate...

Preemptive Protection against Microsoft SharePoint Server Cross-Site Scripting Vulnerability (MS07-059)

A cross-site scripting XSS vulnerability exists in Microsoft Windows SharePoint Services and in Microsoft Office SharePoint Server. Windows SharePoint Services provide a platform for collaboration applications and document management. Office SharePoint Server is an integrated suite of server...