EUVD-2018-6850

Malware in sbrugna...

EUVD-2018-6848

Malware in sbrugna...

EUVD-2018-6846

Malware in sbrugna...

EUVD-2018-6847

Malware in sbrugna...

EUVD-2018-6849

Malware in sbrugna...

SQL Injection Vulnerability in Emlsoft

EMLsoft is an enterprise address book management system. A SQL injection vulnerability exists in Emlsoft v5.4.5, which stems from a failure to filter item parameters, and can be exploited by attackers to obtain sensitive database information...

EMLsoft 'numPerPage' Parameter SQL Injection Vulnerability

EMLsoft is an enterprise address book management system. A SQL injection vulnerability exists in the upload\eml\action\action.address.php file in EMLsoft version 5.4.5. A remote attacker can exploit this vulnerability to view, add, modify or delete information in the back-end database with the he...

EMLsoft Cross-Site Request Forgery Vulnerability

EMLsoft is an enterprise address book management system. A cross-site request forgery vulnerability exists in the eml/upload/eml/?action=user&do=add page in EMLsoft 5.4.5. A remote attacker can use the eml/upload/eml/?action=user&do=add page to add an administrator account...

EMLsoft SQL Injection Vulnerability

EMLsoft is an enterprise address book management system. A SQL injection vulnerability exists in the upload\eml\action\action.user.php file in EMLsoft version 5.4.5. A remote attacker can exploit this vulnerability to view, add, modify or delete information in the back-end database with the help ...

EMLsoft Cross-Site Scripting Vulnerability

EMLsoft is an enterprise address book management system. A cross-site scripting vulnerability exists in EMLsoft version 5.4.5, which can be exploited by remote attackers to inject arbitrary Web script or HTML via the eml/upload/eml/?action=address&do=edit page...

CVE-2018-14965

An issue was discovered in EMLsoft 5.4.5. The eml/upload/eml/?action=address&do=add page allows CSRF...

CVE-2018-14968

An issue was discovered in EMLsoft 5.4.5. upload\eml\action\action.address.php has SQL Injection via the numPerPage parameter...

CVE-2018-14967

An issue was discovered in EMLsoft 5.4.5. upload\eml\action\action.user.php has SQL Injection via the numPerPage parameter...

Cross site request forgery (csrf)

An issue was discovered in EMLsoft 5.4.5. The eml/upload/eml/?action=user&do=add page allows CSRF...

CVE-2018-14966

An issue was discovered in EMLsoft 5.4.5. The eml/upload/eml/?action=user&do=add page allows CSRF...

Cross site request forgery (csrf)

An issue was discovered in EMLsoft 5.4.5. The eml/upload/eml/?action=address&do=add page allows CSRF...

CVE-2018-14965

An issue was discovered in EMLsoft 5.4.5. The eml/upload/eml/?action=address&do=add page allows CSRF...

CVE-2018-14964

An issue was discovered in EMLsoft 5.4.5. XSS exists via the eml/upload/eml/?action=address&do=edit page...

Code injection

An issue was discovered in EMLsoft 5.4.5. XSS exists via the eml/upload/eml/?action=address&do=edit page...

CVE-2018-14967

An issue was discovered in EMLsoft 5.4.5. upload\eml\action\action.user.php has SQL Injection via the numPerPage parameter...