eba.europa.eu XSS vulnerability

Open Bug Bounty ID: OBB-607240 Description| Value ---|--- Affected Website:| eba.europa.eu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Authentication flaw

The LDAP backend in Novell eDirectory before 9.0 SP4 when switched to EBA Enhanced Background Authentication kept open connections without EBA...

CVE-2017-9277

The LDAP backend in Novell eDirectory before 9.0 SP4 when switched to EBA Enhanced Background Authentication kept open connections without EBA...

CVE-2017-9285 Login restrictions not applied when using ebaclient against NetIQ eDirectory EBA interface

NetIQ eDirectory before 9.0 SP4 did not enforce login restrictions when "ebaclient" was used, allowing unpermitted access to eDirectory services...

CVE-2017-9277 existing connection is being used even though eDirectory LDAP server is upgraded to EBA

The LDAP backend in Novell eDirectory before 9.0 SP4 when switched to EBA Enhanced Background Authentication kept open connections without EBA...

PT-2018-8499

Name of the Vulnerable Software and Affected Versions Novell eDirectory versions prior to 9.0 SP4 Description The LDAP backend in Novell eDirectory has an issue when switched to EBA Enhanced Background Authentication, where it keeps open connections without EBA. Recommendations For versions prior...

CVE-2007-2190

PHP remote file inclusion vulnerability in admin/public/webpages.php in Eba News 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the filename parameter...

CVE-2007-2190

PHP remote file inclusion vulnerability in admin/public/webpages.php in Eba News 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the filename parameter...

CVE-2007-2190

The CVE-2007-2190 issue affects Eba News 1.1 (admin/public/webpages.php): a PHP remote file inclusion vulnerability that lets an attacker cause arbitrary PHP code execution by supplying a URL in the filename parameter. The root cause is a server-side handling flaw that writes or includes unauthen...

CVE-2007-2190: Undefined Security Weakness

PHP remote file inclusion vulnerability in admin/public/webpages.php in Eba News 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the filename parameter...

PT-2007-3531 · Eba News · Eba News

Name of the Vulnerable Software and Affected Versions: Eba News version 1.1 Description: A remote file inclusion issue in the admin/public/webpages.php file allows remote attackers to execute arbitrary PHP code via a URL in the filename parameter. Recommendations: For Eba News version 1.1, avoid...

ebanews-rfi.txt

-------------------------------------------------- Eba News Version : v1.1 = webpages.php Remote File Include -------------------------------------------------- Author : SekoMirza Date Found : Nisan 11 2007 Location : Fransa // ... Critical Lvl : Highly critical Impact : System access Where : Fro...

Eba News Version : v1.1 <= (webpages.php) Remote File Include // starhack.org

-------------------------------------------------- Eba News Version : v1.1 = webpages.php Remote File Include -------------------------------------------------- Author : SekoMirza Date Found : Nisan 11 2007 Location : Fransa // ... Critical Lvl : Highly critical Impact : System access Where : Fro...