i-doit Pro - 'objID' SQL Injection

source: https://www.securityfocus.com/bid/65557/info i-doit Pro is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

CVE-2013-1413

Multiple cross-site scripting XSS vulnerabilities in synetics i-doit open 0.9.9-7, i-doit pro 1.0 and earlier, and i-doit pro 1.0.2 when the 'sanitize user input' flag is not enabled, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-1237

Cross-site scripting XSS vulnerability in synetics i-doit pro before 1.2.4 allows remote attackers to inject arbitrary web script or HTML via the call parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in synetics i-doit open 0.9.9-7, i-doit pro 1.0 and earlier, and i-doit pro 1.0.2 when the 'sanitize user input' flag is not enabled, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in synetics i-doit pro before 1.2.4 allows remote attackers to inject arbitrary web script or HTML via the call parameter...

CVE-2013-1413

CVE-2013-1413 involves multiple XSS flaws in i-doit/open and i-doit Pro (pre-1.0) where output encoding is insufficient when the sanitize user input flag is not enabled. Exploitation would allow remote script/HTML injection via unspecified vectors and user sessions. The CSNC advisory and related ...

CVE-2014-1237

Cross-site scripting XSS vulnerability in synetics i-doit pro before 1.2.4 allows remote attackers to inject arbitrary web script or HTML via the call parameter...

CVE-2014-1237

CVE-2014-1237: XSS in synetics i-doit Pro prior to 1.2.4. The vulnerability arises from insufficient encoding of user-supplied data, allowing remote attackers to inject arbitrary web script or HTML via the call parameter. Affected: i-doit Pro before 1.2.4 (and likely earlier versions per advisory...

CVE-2013-1413

Multiple cross-site scripting XSS vulnerabilities in synetics i-doit open 0.9.9-7, i-doit pro 1.0 and earlier, and i-doit pro 1.0.2 when the 'sanitize user input' flag is not enabled, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-1413: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in synetics i-doit open 0.9.9-7, i-doit pro 1.0 and earlier, and i-doit pro 1.0.2 when the 'sanitize user input' flag is not enabled, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-1237: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in synetics i-doit pro before 1.2.4 allows remote attackers to inject arbitrary web script or HTML via the call parameter...

i-doit Pro 1.2.4 Cross Site Scripting

COMPASS SECURITY ADVISORY http://www.csnc.ch/ CVE ID : CVE-2014-1237 CSNC ID: CSNC-2014-002 Product: i-doit Vendor: synetics Gesellschaft für Systemintegration mbH Subject: Cross-site Scripting - XSS Risk: High Effect: Remotely exploitable Author: Stephan Rickauer [email protected] Date:...

CVE-2013-1413

COMPASS SECURITY ADVISORY http://www.csnc.ch/ CVE ID : CVE-2013-1413 CSNC ID: CSNC-2013-003 Product: i-doit Vendor: synetics Gesellschaft fьr Systemintegration mbH Subject: Cross-site Scripting - XSS Risk: High Effect: Remotely exploitable Author: Stephan Rickauer [email protected] Date:...

i-doit 'lang' Parameter Local File Include Vulnerability

I-doit is prone to local file inclusion vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

i-doIT 0.9.9-4 LFI Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------------ Software................i-doIT 0.9.9-4 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5 Download................http://www.i-doit.org/...

i-doIT 0.9.9-4 - Local File Inclusion

i-doIT 0.9.9-4 - Local File Inclusion ------------------------------------------------------------------------ Software................i-doIT 0.9.9-4 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5 Download................http://www.i-doit.org/ Discovery...

i-doIT 0.9.9-4 - Local File Inclusion

------------------------------------------------------------------------ Software................i-doIT 0.9.9-4 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5 Download................http://www.i-doit.org/ Discovery Date..........5/23/2011 Tested...

i-doIT 0.9.9-4 Local File Inclusion

------------------------------------------------------------------------ Software................i-doIT 0.9.9-4 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5 Download................http://www.i-doit.org/ Discovery Date..........5/23/2011 Tested...

CVE-2008-5706

The cTrigger::DoIt function in src/ctrigger.cpp in the trigger mechanism in the daemon in Verlihub 0.9.8d-RC2 and earlier allows local users to overwrite arbitrary files via a symlink attack on the /tmp/trigger.tmp temporary file...

CVE-2008-5705

The cTrigger::DoIt function in src/ctrigger.cpp in the trigger mechanism in the daemon in Verlihub 0.9.8d-RC2 and earlier, when user triggers are enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in an argument...