Groupmax World Wide Web Desktop/BUNSHOKANRI(=DocumentManagement) Cross-Site Scripting Vulnerability

Overview A cross-site scripting vulnerability has been found in the Groupmax World Wide Web Desktop/BUNSHOKANRI =DocumentManagement. Impact A remote attacker could execute malicious scripts. Solution Please refer to the 'Vendor Information' section for official countermesure and take appropriate...

Preemptive Protection against Microsoft SharePoint Server Cross-Site Scripting Vulnerability (MS07-059)

A cross-site scripting XSS vulnerability exists in Microsoft Windows SharePoint Services and in Microsoft Office SharePoint Server. Windows SharePoint Services provide a platform for collaboration applications and document management. Office SharePoint Server is an integrated suite of server...

CVE-2007-2849

KnowledgeTree Document Management aka KnowledgeTree Open Source before STABLE 3.3.7 does not require a password for an unregistered user, when the user exists in Active Directory, which allows remote attackers to log onto KTDMS without the intended authorization check...

CVE-2007-2849

KnowledgeTree Document Management aka KnowledgeTree Open Source before STABLE 3.3.7 does not require a password for an unregistered user, when the user exists in Active Directory, which allows remote attackers to log onto KTDMS without the intended authorization check...

Authorization

KnowledgeTree Document Management aka KnowledgeTree Open Source before STABLE 3.3.7 does not require a password for an unregistered user, when the user exists in Active Directory, which allows remote attackers to log onto KTDMS without the intended authorization check...

CVE-2007-2849

The CVE-2007-2849 entry affects KnowledgeTree Document Management (KnowledgeTree Open Source) prior to STABLE 3.3.7. The vulnerability allows an unregistered user to log in if the user exists in Active Directory, bypassing the intended authorization check and enabling remote login to KTDMS. Affec...

ZDI-07-016: Oracle E-Business Suite Arbitrary Node Deletion Vulnerability

ZDI-07-016: Oracle E-Business Suite Arbitrary Node Deletion Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-016.html April 18, 2007 -- CVE ID: CVE-2007-2170 -- Affected Vendor: Oracle -- Affected Products: Oracle E-Business Suite -- TippingPointTM IPS Customer Protection:...

Oracle E-Business Suite Arbitrary Node Deletion Vulnerability

This vulnerability allows remote attackers to delete any existing Document Management node on vulnerable installations of Oracle E-Business Suite. Authentication is not required to exploit this vulnerability. The specific flaw exists in the APPLSYS.FNDDMNODES package. The procedure to delete node...

UeberProject <= 1.0 (login/secure.php) Remote File Include Vulnerability

No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-= -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Uber Project Document Management System secure.php Remote File Include Vulnerability...

UeberProject <= 1.0 (login/secure.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ======================================================================== UeberProject = 1.0 login/secure.php Remote File Include Vulnerability ========================================================================...

Owl Intranet Engine lib/OWL_API.php xrms_file_root Parameter Remote File Inclusion

The remote host is running Owl Intranet Engine, a web-based document management system written in PHP. The version of Owl Intranet Engine on the remote host fails to sanitize user-supplied input to the 'xrmsfileroot' parameter of the 'lib/OWLAPI.php' script before using it in a PHP 'requireonce'...

JVN#41550845 Nagasaki Electronic Prefectural Office System SQL injection vulnerability

Impact A remote attacker may view or modify the database contents. Solution Products Affected Nagasaki Electronic Prefectural Office System's annual leave management system Nagasaki Electronic Prefectural Office System's staff directry system Nagasaki Electronic Prefectural Office System's docume...

Community Enterprise 4.x Multiple vuln.

Community Enterprise 4.x Multiple vuln. Vuln. discovered by : r0t Date: 17 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/community-enterprise-4x-multiple-vuln.html vendor:http://www.citysoft.com/ affected version: 4.x and prior Product Description: CitySoft's Community Enterprise...

CVE-2002-1841

CVE-2002-1841 affects NOLA 1.1.1 and 1.1.2 where the document management module does not restrict uploaded file types, enabling remote attackers to upload and execute arbitrary PHP files (e.g., with .php4 extensions). The root cause is lack of validation on uploaded content within the document ma...

CVE-2002-1841

The document management module in NOLA 1.1.1 and 1.1.2 does not restrict the types of files that are uploaded, which allows remote attackers to upload and execute arbitrary PHP files with extensions such as .php4...

getintranet.txt

CRIOLABS - Software: getIntranet - Type: E-business:Intranet - Company: getSolutions - Date: 09-9-2004 Software: getIntranet. Platform: ASP, Microsoft SQL. Comments: Administration section Not Tested Description getIntranet is a rapidly deployable Intranet-in-a-box: a feature-rich, cost-effective...

MyDMS.txt

--------------------------------------------------------------------------- Multiple vulnerabilities in MyDMS --------------------------------------------------------------------------- Author: Joxean Koret Date: 2004 Location: Basque Country...

MyDMS < 1.4.3 Multiple Vulnerabilities

The remote host is running MyDMS, an open source document management system based on MySQL and PHP. The remote version of this software is vulnerable to a SQL injection bug that may allow any guest user to execute arbitrary SQL commands against the remote database. There is also a directory...

OpenDocMan Access Control Bypass

The remote host is running OpenDocMan, an open source document management system. There is a flaw in the remote version of this software that could allow an attacker with a given account to modify the content of some documents he would otherwise not have access to. %NASLMINLEVEL 70300 C Tenable...

Effect Office 2.9 buffer overflow

Слышал когда нить о такоя проге как "Эффект офисEffectOffice"..... http://www.effectoffice.com/ Это система документа оборота от компании "Гарант Интернэшнел" и она используется многими организациями для "Эффективного" документаоборота организацииМы её хотели себе ставить.... Дык вот к чему енто...