CVE-2017-7887

Dolibarr ERP/CRM 4.0.4 has XSS in doli/societe/list.php via the sall parameter...

CVE-2017-7888

Dolibarr ERP/CRM 4.0.4 stores passwords with the MD5 algorithm, which makes brute-force attacks easier...

CVE-2017-7887

CVE-2017-7887 concerns Dolibarr ERP/CRM 4.0.4 with a reported Cross‑Site Scripting (XSS) in the file doli/societe/list.php via the sall parameter. Multiple connected sources corroborate this vulnerability, including NVD and OSV entries citing the same flaw. The vulnerability is described as XSS w...

PT-2017-17973 · Dolibarr · Dolibarr Erp/Crm

Name of the Vulnerable Software and Affected Versions: Dolibarr ERP/CRM version 4.0.4 Description: The issue is related to SQL Injection in the doli/theme/eldy/style.css.php file via the lang parameter. Recommendations: For version 4.0.4, avoid using the lang parameter in the affected file until...

Dolibarr 4.0.4 SQL Injection / XSS / Weaknesses

=== FOXMOLE - Security Advisory 2017-02-23 === Dolibarr ERP & CRM - Multiple Issues Affected Versions ================= Dolibarr 4.0.4 Issue Overview ============== Vulnerability Type: SQL Injection, Cross Site Scripting, Weak Hash Algorithm without Salt, Weak Password Change Method Technical Ris...

CVE-2017-8879: Improper Authentication

Dolibarr ERP/CRM 4.0.4 allows password changes without supplying the current password, which makes it easier for physically proximate attackers to obtain access via an unattended workstation...

CVE-2017-7888: Inadequate Encryption Strength

Dolibarr ERP/CRM 4.0.4 stores passwords with the MD5 algorithm, which makes brute-force attacks easier...

CVE-2017-7886: Improper Neutralization of Special Elements used in an SQL Command

Dolibarr ERP/CRM 4.0.4 has SQL Injection in doli/theme/eldy/style.css.php via the lang parameter...

CVE-2017-7887: Improper Neutralization of Input During Web Page Generation

Dolibarr ERP/CRM 4.0.4 has XSS in doli/societe/list.php via the sall parameter...

Path traversal

Splunk Hadoop Connect App has a path traversal vulnerability that allows remote authenticated users to execute arbitrary code, aka ERP-2041...

CVE-2017-7565

Splunk Hadoop Connect App has a path traversal vulnerability that allows remote authenticated users to execute arbitrary code, aka ERP-2041...

CVE-2017-7565

CVE-2017-7565 affects the Splunk Hadoop Connect App and is a path traversal vulnerability. The underlying issue allows remote authenticated users to execute arbitrary code via the vulnerable component/file, as described in multiple sources (ERP-2041). The available data identifies the affected pr...

CVE-2017-7565: Improper Limitation of a Pathname to a Restricted Directory

Splunk Hadoop Connect App has a path traversal vulnerability that allows remote authenticated users to execute arbitrary code, aka ERP-2041...

SAP ERP Remote Authentication Bypass Vulnerability

SAP ERP is a set of integrated enterprise resource planning system based on customer/server structure and open system from SAP, Germany. The system supports custom reports, standardized processes and automated execution of business processes. An authentication bypass vulnerability exists in SAP...

FTPShell Client 6.53 Buffer Overflow

!/usr/bin/python FTPShell Client 6.53 buffer overflow By NA , NAattutanota.com Tested on Windows 7 Professional Credit to Peter Baris for finding the vulnerability and also submitting the CVE and public exploit. CVE: CVE-2017-6465 Vendor Homepage: http://www.saptech-erp.com.au Tested on: Microsof...

Azure Data Expert Ultimate 2.2.16 - Buffer Overflow Exploit

Exploit for windows platform in category remote exploits Exploit Title: Azure Data Expert Ultimate 2.2.16 – buffer overflow Date: 2017-03-07 Exploit Author: Peter Baris Vendor Homepage: http://www.saptech-erp.com.au Software Link: http://www.azuredex.com/downloads.html Version: 2.2.16 Tested on:...

Azure Data Expert Ultimate 2.2.16 Buffer Overflow

Exploit Title: Azure Data Expert Ultimate 2.2.16 a buffer overflow Date: 2017-03-07 Exploit Author: Peter Baris Vendor Homepage: http://www.saptech-erp.com.au Software Link: http://www.azuredex.com/downloads.html Version: 2.2.16 Tested on: Windows Server 2008 R2 Standard x64 CVE : CVE-2017-6506 T...

Azure Data Expert Ultimate 2.2.16 - Remote Buffer Overflow

Azure Data Expert Ultimate 2.2.16 - Remote Buffer Overflow Exploit Title: Azure Data Expert Ultimate 2.2.16 – buffer overflow Date: 2017-03-07 Exploit Author: Peter Baris Vendor Homepage: http://www.saptech-erp.com.au Software Link: http://www.azuredex.com/downloads.html Version: 2.2.16 Tested on...

FTPShell Client 6.53 - Buffer Overflow Exploit

Exploit for windows platform in category remote exploits Exploit Title: FTPShell Client 6.53 buffer overflow on making initial connection Date: 2017-03-04 Exploit Author: Peter Baris Vendor Homepage: http://www.saptech-erp.com.au Software Link: http://www.ftpshell.com/downloadclient.htm Version:...

Select Your College Script 2.01 - SQL Injection

Select Your College Script 2.01 - SQL Injection Exploit Title: Select Your College Script v2.01 - SQL Injection Google Dork: N/A Date: 06.03.2017 Vendor Homepage: http://www.phpscriptsmall.com/ Software : http://www.phpscriptsmall.com/product/select-your-college-script/ Demo:...