OpenDocMan 1.2.5 xss, SQL injection

Exploit for unknown platform in category web applications =================================== OpenDocMan 1.2.5 xss, SQL injection =================================== Security Advisory : Multiple vulnerabilities in OpenDocMan Overview -------------- OpenDocMan is a free document management system...

Microsoft SharePoint Server Detection

The remote web server is running SharePoint, a web interface for document management. As this interface is likely to contain sensitive information, make sure only authorized personel can log into this site C Tenable Network Security, Inc. include"compat.inc"; if description scriptid38157;...

Afian Local File Inclusion

Afian is an application that can add, in just minutes, powerful document management capabilities to any Web server. It provides an Web-based interface for documents residing on the Web server's file system. This software has a secutity hole allow attackers download any files if they know the path...

Sql injection

SQL injection vulnerability in login.php in Simple Document Management System SDMS 1.1.5 and 1.1.4, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the login parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from...

CVE-2008-6220

SQL injection vulnerability in login.php in Simple Document Management System SDMS 1.1.5 and 1.1.4, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the pass parameter...

CVE-2008-6220

CVE-2008-6220 affects Simple Document Management System (SDMS) versions 1.1.5 and 1.1.4 (and possibly earlier). The vulnerability is a SQL injection in login.php that allows remote attackers to execute arbitrary SQL commands via the pass parameter. Root cause: unsanitized user input fed into a SQ...

Simple Document Management System 1.1.4 SQL Injection Auth Bypass

No description provided by source. SDMS Simple Document Management System v1.1.4 SQL Injection Author: Yuri Program: SDMS Simple Document Management System Version: v1.1.4 and probably all older versions as well Website: http://sdms.cafuego.net/ How it works The login system is very insecure, thi...

sdms-sql.txt

SDMS Simple Document Management System v1.1.4 SQL Injection Author: Yuri Program: SDMS Simple Document Management System Version: v1.1.4 and probably all older versions as well Website: http://sdms.cafuego.net/ How it works The login system is very insecure, this is the code we are going to abuse...

Simple Document Management System 1.1.4 - Authentication Bypass

SDMS Simple Document Management System v1.1.4 SQL Injection Author: Yuri Program: SDMS Simple Document Management System Version: v1.1.4 and probably all older versions as well Website: http://sdms.cafuego.net/ How it works The login system is very insecure, this is the code we are going to abuse...

Simple Document Management System 1.1.4 - Authentication Bypass

Simple Document Management System 1.1.4 - Authentication Bypass SDMS Simple Document Management System v1.1.4 SQL Injection Author: Yuri Program: SDMS Simple Document Management System Version: v1.1.4 and probably all older versions as well Website: http://sdms.cafuego.net/ How it works The login...

Cross site scripting

Cross-site scripting XSS vulnerability in Nordicwind Document Management System NOAH before 3.2.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-3730

Cross-site scripting XSS vulnerability in Nordicwind Document Management System NOAH before 3.2.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-3730

The CVE-2008-3730 entry documents a Cross-site scripting (XSS) vulnerability in Nordicwind Document Management System (NOAH) prior to version 3.2.2. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Affected product: Nordicwind NOAH (version before ...

[Full-disclosure] S21SEC-044-en:OpenDocMan Cross Site Scripting (XSS)

S21Sec Advisory - Title: OpenDocMan Cross Site Scripting XSS ID: S21sec-044-en Severity: Low History: 15.Apr.2008 Vulnerability discovered 16.Apr.2008 Vendor contacted 27.May.2008 Patch available Scope: Cross Site Scripting XSS Platforms: Any Author: Sergi Rosell [email protected] URL:...

Groupmax World Wide Web Desktop/BUNSHOKANRI(=DocumentManagement) Cross-Site Scripting Vulnerability

Overview A cross-site scripting vulnerability has been found in the Groupmax World Wide Web Desktop/BUNSHOKANRI =DocumentManagement. Impact A remote attacker could execute malicious scripts. Solution Please refer to the 'Vendor Information' section for official countermesure and take appropriate...

Preemptive Protection against Microsoft SharePoint Server Cross-Site Scripting Vulnerability (MS07-059)

A cross-site scripting XSS vulnerability exists in Microsoft Windows SharePoint Services and in Microsoft Office SharePoint Server. Windows SharePoint Services provide a platform for collaboration applications and document management. Office SharePoint Server is an integrated suite of server...

Authorization

KnowledgeTree Document Management aka KnowledgeTree Open Source before STABLE 3.3.7 does not require a password for an unregistered user, when the user exists in Active Directory, which allows remote attackers to log onto KTDMS without the intended authorization check...

CVE-2007-2849

KnowledgeTree Document Management aka KnowledgeTree Open Source before STABLE 3.3.7 does not require a password for an unregistered user, when the user exists in Active Directory, which allows remote attackers to log onto KTDMS without the intended authorization check...

CVE-2007-2849

KnowledgeTree Document Management aka KnowledgeTree Open Source before STABLE 3.3.7 does not require a password for an unregistered user, when the user exists in Active Directory, which allows remote attackers to log onto KTDMS without the intended authorization check...

CVE-2007-2849

The CVE-2007-2849 entry affects KnowledgeTree Document Management (KnowledgeTree Open Source) prior to STABLE 3.3.7. The vulnerability allows an unregistered user to log in if the user exists in Active Directory, bypassing the intended authorization check and enabling remote login to KTDMS. Affec...