579 matches found
ZDI-07-016: Oracle E-Business Suite Arbitrary Node Deletion Vulnerability
ZDI-07-016: Oracle E-Business Suite Arbitrary Node Deletion Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-016.html April 18, 2007 -- CVE ID: CVE-2007-2170 -- Affected Vendor: Oracle -- Affected Products: Oracle E-Business Suite -- TippingPointTM IPS Customer Protection:...
Oracle E-Business Suite Arbitrary Node Deletion Vulnerability
This vulnerability allows remote attackers to delete any existing Document Management node on vulnerable installations of Oracle E-Business Suite. Authentication is not required to exploit this vulnerability. The specific flaw exists in the APPLSYS.FNDDMNODES package. The procedure to delete node...
UeberProject <= 1.0 (login/secure.php) Remote File Include Vulnerability
No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-= -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Uber Project Document Management System secure.php Remote File Include Vulnerability...
UeberProject <= 1.0 (login/secure.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ======================================================================== UeberProject = 1.0 login/secure.php Remote File Include Vulnerability ========================================================================...
Owl Intranet Engine lib/OWL_API.php xrms_file_root Parameter Remote File Inclusion
The remote host is running Owl Intranet Engine, a web-based document management system written in PHP. The version of Owl Intranet Engine on the remote host fails to sanitize user-supplied input to the 'xrmsfileroot' parameter of the 'lib/OWLAPI.php' script before using it in a PHP 'requireonce'...
JVN#41550845 Nagasaki Electronic Prefectural Office System SQL injection vulnerability
Impact A remote attacker may view or modify the database contents. Solution Products Affected Nagasaki Electronic Prefectural Office System's annual leave management system Nagasaki Electronic Prefectural Office System's staff directry system Nagasaki Electronic Prefectural Office System's docume...
Community Enterprise 4.x Multiple vuln.
Community Enterprise 4.x Multiple vuln. Vuln. discovered by : r0t Date: 17 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/community-enterprise-4x-multiple-vuln.html vendor:http://www.citysoft.com/ affected version: 4.x and prior Product Description: CitySoft's Community Enterprise...
CVE-2002-1841
CVE-2002-1841 affects NOLA 1.1.1 and 1.1.2 where the document management module does not restrict uploaded file types, enabling remote attackers to upload and execute arbitrary PHP files (e.g., with .php4 extensions). The root cause is lack of validation on uploaded content within the document ma...
CVE-2002-1841
The document management module in NOLA 1.1.1 and 1.1.2 does not restrict the types of files that are uploaded, which allows remote attackers to upload and execute arbitrary PHP files with extensions such as .php4...
getintranet.txt
CRIOLABS - Software: getIntranet - Type: E-business:Intranet - Company: getSolutions - Date: 09-9-2004 Software: getIntranet. Platform: ASP, Microsoft SQL. Comments: Administration section Not Tested Description getIntranet is a rapidly deployable Intranet-in-a-box: a feature-rich, cost-effective...
MyDMS.txt
--------------------------------------------------------------------------- Multiple vulnerabilities in MyDMS --------------------------------------------------------------------------- Author: Joxean Koret Date: 2004 Location: Basque Country...
MyDMS < 1.4.3 Multiple Vulnerabilities
The remote host is running MyDMS, an open source document management system based on MySQL and PHP. The remote version of this software is vulnerable to a SQL injection bug that may allow any guest user to execute arbitrary SQL commands against the remote database. There is also a directory...
OpenDocMan Access Control Bypass
The remote host is running OpenDocMan, an open source document management system. There is a flaw in the remote version of this software that could allow an attacker with a given account to modify the content of some documents he would otherwise not have access to. %NASLMINLEVEL 70300 C Tenable...
Effect Office 2.9 buffer overflow
Слышал когда нить о такоя проге как "Эффект офисEffectOffice"..... http://www.effectoffice.com/ Это система документа оборота от компании "Гарант Интернэшнел" и она используется многими организациями для "Эффективного" документаоборота организацииМы её хотели себе ставить.... Дык вот к чему енто...
CVE-2002-1841
The document management module in NOLA 1.1.1 and 1.1.2 does not restrict the types of files that are uploaded, which allows remote attackers to upload and execute arbitrary PHP files with extensions such as .php4...
@stake Advisory: DocumentDirect for the Internet (A090800-1)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The vulnerability documented in this advisory is remotely exploitable yet we are releasing it on a Friday. We don't see this as adding any additional risk to DocumentDirect customers. The vendor, Mobius, has assured us that they have contacted all the...
Office 2010 1028
Office 2010 1028...