EUVD-2018-6850

Malware in sbrugna...

EUVD-2018-6846

Malware in sbrugna...

EUVD-2018-6848

Malware in sbrugna...

EUVD-2018-6847

Malware in sbrugna...

EUVD-2018-6849

Malware in sbrugna...

SQL Injection Vulnerability in Emlsoft

EMLsoft is an enterprise address book management system. A SQL injection vulnerability exists in Emlsoft v5.4.5, which stems from a failure to filter item parameters, and can be exploited by attackers to obtain sensitive database information...

EMLsoft Cross-Site Request Forgery Vulnerability

EMLsoft is an enterprise address book management system. A cross-site request forgery vulnerability exists in the eml/upload/eml/?action=user&do=add page in EMLsoft 5.4.5. A remote attacker can use the eml/upload/eml/?action=user&do=add page to add an administrator account...

EMLsoft 'numPerPage' Parameter SQL Injection Vulnerability

EMLsoft is an enterprise address book management system. A SQL injection vulnerability exists in the upload\eml\action\action.address.php file in EMLsoft version 5.4.5. A remote attacker can exploit this vulnerability to view, add, modify or delete information in the back-end database with the he...

EMLsoft SQL Injection Vulnerability

EMLsoft is an enterprise address book management system. A SQL injection vulnerability exists in the upload\eml\action\action.user.php file in EMLsoft version 5.4.5. A remote attacker can exploit this vulnerability to view, add, modify or delete information in the back-end database with the help ...

EMLsoft Cross-Site Scripting Vulnerability

EMLsoft is an enterprise address book management system. A cross-site scripting vulnerability exists in EMLsoft version 5.4.5, which can be exploited by remote attackers to inject arbitrary Web script or HTML via the eml/upload/eml/?action=address&do=edit page...

CVE-2018-14966

An issue was discovered in EMLsoft 5.4.5. The eml/upload/eml/?action=user&do=add page allows CSRF...

CVE-2018-14967

An issue was discovered in EMLsoft 5.4.5. upload\eml\action\action.user.php has SQL Injection via the numPerPage parameter...

Sql injection

An issue was discovered in EMLsoft 5.4.5. upload\eml\action\action.user.php has SQL Injection via the numPerPage parameter...

CVE-2018-14965

An issue was discovered in EMLsoft 5.4.5. The eml/upload/eml/?action=address&do=add page allows CSRF...

Cross site request forgery (csrf)

An issue was discovered in EMLsoft 5.4.5. The eml/upload/eml/?action=address&do=add page allows CSRF...

Cross site request forgery (csrf)

An issue was discovered in EMLsoft 5.4.5. The eml/upload/eml/?action=user&do=add page allows CSRF...

Sql injection

An issue was discovered in EMLsoft 5.4.5. upload\eml\action\action.address.php has SQL Injection via the numPerPage parameter...

CVE-2018-14966

An issue was discovered in EMLsoft 5.4.5. The eml/upload/eml/?action=user&do=add page allows CSRF...

CVE-2018-14965

An issue was discovered in EMLsoft 5.4.5. The eml/upload/eml/?action=address&do=add page allows CSRF...

CVE-2018-14964

An issue was discovered in EMLsoft 5.4.5. XSS exists via the eml/upload/eml/?action=address&do=edit page...