PHP Live Helper <= 1.x (abs_path) Remote File Include Vulnerability

No description provided by source. --------------------------------------------------------------------------- PHP Live Helper =abspath Remote File Include Vulnerabilities --------------------------------------------------------------------------- Discovered By SnIpErSA Author : SnIpErSA Remote :...

iOS Share 1.0 - Directory Traversal

No description provided by source. Exploit Title: Share v1.0 for iPhone / iPod touch, Directory Traversal Date: 02/24/2011 Author: R3d@l3rt, Sunlight, H@ckk3y Software Link : http://itunes.apple.com/kr/app/filer-lite-download-view-manage/id350671847?mt=8 Version: 1.0 Tested on: iPhone, iPod 3GS...

Majordomo 1.89/1.90 lists Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2310/info Majordomo is a perl-based Internet e-mail list server. Versions prior to 1.91 are vulnerable to an attack whereby specially crafted e-mail headers are incorrectly processed, yielding the ability to execute...

eSignal and eSignal Pro <= 10.6.2425.1208 Multiple Vulnerabilites

No description provided by source. Luigi Auriemma Application: eSignal and eSignal Pro http://www.esignal.com/esignal/default.aspx Versions: = 10.6.2425.1208 Platforms: Windows Bugs: A code execution B heap overflow Exploitation: file Date: 06 Sep 2011 Author: Luigi Auriemma e-mail:...

CVE-2014-3866

Multiple cross-site request forgery CSRF vulnerabilities in usersettings.php in Usercake 2.0.2 and earlier allow remote attackers to hijack the authentication of administrators for requests that change the 1 administrative password via the passwordc parameter or 2 administrative e-mail address vi...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in usersettings.php in Usercake 2.0.2 and earlier allow remote attackers to hijack the authentication of administrators for requests that change the 1 administrative password via the passwordc parameter or 2 administrative e-mail address vi...

Design/Logic Flaw

Unspecified vulnerability in the Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 allows remote attackers to discover user names, full names, and e-mail addresses via a search...

CVE-2013-3975

Unspecified vulnerability in the Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 allows remote attackers to discover user names, full names, and e-mail addresses via a search...

Cisco Unified Web and E-Mail Interaction Manager Broken Authentication Vulnerability

A vulnerability in Cisco Unified Web and E-Mail Interaction Manager could allow an unauthenticated, remote attacker to capture, forge, or brute force a session identifier transmitted as a parameter in GET requests. The vulnerability is due to improper use of session identifiers in GET requests. A...

CVE-2014-2194

system/egain/chat/entrypoint in Cisco Unified Web and E-mail Interaction Manager 9.02 allows remote attackers to have an unspecified impact by injecting a spoofed XML external entity...

CVE-2014-2193

Cisco Unified Web and E-Mail Interaction Manager places session identifiers in GET requests, which allows remote attackers to inject conversation text by obtaining a valid identifier, aka Bug ID CSCuj43084...

Xxe

system/egain/chat/entrypoint in Cisco Unified Web and E-mail Interaction Manager 9.02 allows remote attackers to have an unspecified impact by injecting a spoofed XML external entity...

Design/Logic Flaw

Cisco Unified Web and E-Mail Interaction Manager places session identifiers in GET requests, which allows remote attackers to inject conversation text by obtaining a valid identifier, aka Bug ID CSCuj43084...

CVE-2014-2192

Cross-site scripting XSS vulnerability in Cisco Unified Web and E-mail Interaction Manager 9.02 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCuj43033...

CVE-2014-2194

system/egain/chat/entrypoint in Cisco Unified Web and E-mail Interaction Manager 9.02 allows remote attackers to have an unspecified impact by injecting a spoofed XML external entity...

CVE-2014-2192

CVE-2014-2192 affects Cisco Unified Web and E-mail Interaction Manager 9.0(2). The issue is a cross-site scripting (XSS) vulnerability caused by insufficient input validation in a parameter, allowing an unauthenticated, remote attacker to inject arbitrary script or HTML via a crafted link. The Ci...

CVE-2014-2193

CVE-2014-2193 affects Cisco Unified Web and E-Mail Interaction Manager. Root cause: improper use of session identifiers in GET requests, enabling a remote attacker to inject conversation text by obtaining a valid session identifier. Affected products and impact are described in Cisco advisory and...

CVE-2014-2194

Cisco’s advisory CVE-2014-2194 affects Cisco Unified Web and E-mail Interaction Manager 9.0(2). The vulnerability is in the /system/egain/chat/entrypoint script, allowing unauthenticated, remote attackers to inject spoofed XML external entities due to inadequate input validation. Impact is descri...

Cisco Unified Web and E-mail Interaction Manager Cross-Site Scripting Vulnerability

A vulnerability in Cisco Unified Web and E-mail Interaction Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting XSS attacks against users of the Cisco Unified Web and E-mail Interaction Manager web interface. The vulnerability is due to insufficient input...

Cisco Unified Web and E-mail Interaction Manager XML External Entities Vulnerability

A vulnerability in the /system/egain/chat/entrypoint script of Cisco Unified Web and E-mail Interaction Manager could allow an unauthenticated, remote attacker to inject malicious XML entities. The vulnerability is due to inadequate input validation. An attacker could exploit this vulnerability b...