SolarWinds Log and Event Manager Static Credentials (CVE-2014-5504)

A policy bypass vulnerability has been reported in SolarWinds Log and Event Manager. The vulnerability is due to the usage of static/default credentials to access the HyperSQL database. A remote attacker can exploit this vulnerability to access the database with administrator privileges...

CVE-2014-5504

SolarWinds Log and Event Manager before 6.0 uses "static" credentials, which makes it easier for remote attackers to obtain access to the database and execute arbitrary code via unspecified vectors, related to HyperSQL...

Design/Logic Flaw

SolarWinds Log and Event Manager before 6.0 uses "static" credentials, which makes it easier for remote attackers to obtain access to the database and execute arbitrary code via unspecified vectors, related to HyperSQL...

CVE-2014-5504

SolarWinds Log and Event Manager before 6.0 uses "static" credentials, which makes it easier for remote attackers to obtain access to the database and execute arbitrary code via unspecified vectors, related to HyperSQL...

CVE-2014-5504

SolarWinds Log and Event Manager pre-6.0.1 is affected by a HyperSQL authentication flaw due to static/default credentials, enabling a remote, unauthenticated attacker to execute arbitrary code in the database context. Some 6.0.0 instances may be unaffected; remediation is to upgrade to 6.0.1 or ...

SolarWinds Log and Event Manager Static Credential Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SolarWinds Log and Event Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the usage of HyperSQL. The issue lies in the usage of static...

SolarWinds Log & Event Manager for Log Management and SEIM Security

SolarWinds® Log & Event Manager LEM, a full-function Security & Information Event Management SIEM solution, delivers powerful log management capabilities in a highly affordable, easy-to-deploy virtual appliance. SolarWinds LEM combines real-time log analysis, event correlation, and a groundbreaki...

Multiple vulnerabilities in third party extensions

Several vulnerabilities have been found in the following third party TYPO3 extensions: Event Manager eventmanagement, Game Article DB gamearticledb, Simple career mlcareer, Surprise Calendar mlsurprisecalendar, Search Api Ajax Google searchajaxgoogle, Download Manager sprdownloadmanager Release...

WingFTP Server v3.2.4 CSRF Vulnerability

Exploit for unknown platform in category web applications ======================================== WingFTP Server v3.2.4 CSRF Vulnerability ======================================== Application: WingFTP Server 3.2.4 maybe earlier versions too Link: http://www.wftpserver.com/ Vulnerability: CSRF...

Joomla Component Event Manager Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ Joomla Component Event Manager Blind SQL Injection Vulnerability ================================================================ Joomla Component Event Manager Blind SQL...

Joomla Component Event Manager Blind SQL Injection Vulnerability

No description provided by source. ------------------- header data start ------------------- Joomla Component Event Manager Blind SQL Injection Vulnerability author : Fl0riX Script Name : Joomla Component Event Manager 1.5 Bug Type : Blind SQL Injection Infection : Admin login bilgileri alnabilir...

Joomla Event Manager Blind SQL Injection

Joomla Component Event Manager Blind SQL Injection Vulnerability author : Fl0riX Script Name : Joomla Component Event Manager 1.5 Bug Type : Blind SQL Injection Infection : Admin login bilgileri alýnabilir. Demo Vuln. : + »...

Joomla! Component Event Manager - Blind SQL Injection

Joomla! Component Event Manager - Blind SQL Injection Joomla Component Event Manager Blind SQL Injection Vulnerability author : Fl0riX Script Name : Joomla Component Event Manager 1.5 Bug Type : Blind SQL Injection Infection : Admin login bilgileri alnabilir. Demo Vuln. : +...

Joomla! Component Event Manager - Blind SQL Injection

Joomla Component Event Manager Blind SQL Injection Vulnerability author : Fl0riX Script Name : Joomla Component Event Manager 1.5 Bug Type : Blind SQL Injection Infection : Admin login bilgileri alnabilir. Demo Vuln. : + http://server/eventmanager/index.php?option=comcontent&view=article&id=44 an...

Claroline 1.7.5 - Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/29162/info Claroline is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow a remote attacker to compromise the application and the underlying system; other...