Lucene search
+L

439 matches found

zdt
zdt
•added 2010/06/17 12:00 a.m.•24 views

Real Estate SQL Injection vulnerability

Exploit for asp platform in category web applications ======================================= Real Estate SQL Injection vulnerability ======================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ ...

7.1AI score
SaveExploits0
exploitpack
exploitpack
•added 2010/06/16 12:00 a.m.•25 views

Real Estate - SQL Injection

Real Estate - SQL Injection Description Linux And window Version available: This software is available in both windows and linux version. It runs on asp and php extension. Listings: We can add unlimited property listing, with the property photo. System automatically creates three thumbnail photo ...

0.1AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2010/06/16 12:00 a.m.•47 views

Real Estate - SQL Injection

Description Linux And window Version available: This software is available in both windows and linux version. It runs on asp and php extension. Listings: We can add unlimited property listing, with the property photo. System automatically creates three thumbnail photo of the property. Which are...

5.3AI score
SaveExploits0
NVD
NVD
•added 2010/06/03 4:30 p.m.•37 views

CVE-2010-2151

Cross-site request forgery CSRF vulnerability in Fujitsu e-Pares V01 L01 V01 L01, L03, L10, L20, L30, and L40 allows remote attackers to hijack the authentication of users for requests that modify "facility reservation data" via unknown vectors...

2.6CVSS7.1AI score0.00824EPSS
SaveExploits0References5
Prion
Prion
•added 2010/06/03 4:30 p.m.•38 views

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Fujitsu e-Pares V01 L01 V01 L01, L03, L10, L20, L30, and L40 allows remote attackers to hijack the authentication of users for requests that modify "facility reservation data" via unknown vectors...

2.6CVSS7.6AI score0.00824EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2010/06/03 4:00 p.m.•44 views

CVE-2010-2151

Cross-site request forgery CSRF vulnerability in Fujitsu e-Pares V01 L01 V01 L01, L03, L10, L20, L30, and L40 allows remote attackers to hijack the authentication of users for requests that modify "facility reservation data" via unknown vectors...

7.1AI score0.00824EPSS
SaveExploits0References5
CVE
CVE
•added 2010/06/03 4:00 p.m.•71 views

CVE-2010-2151

CVE-2010-2151 is a cross-site request forgery vulnerability in Fujitsu e-Pares (V01 L01, L03, L10, L20, L30, L40). The root issue allows an attacker to cause an authenticated user to perform actions that modify facility reservation data when the user views a malicious page while logged in. Affect...

2.6CVSS7.3AI score0.00824EPSS
SaveExploits0References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/06/03 12:00 a.m.•6 views

CVE-2010-2151: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Fujitsu e-Pares V01 L01 V01 L01, L03, L10, L20, L30, and L40 allows remote attackers to hijack the authentication of users for requests that modify "facility reservation data" via unknown vectors...

2.6CVSS5.9AI score0.00824EPSS
SaveExploits0References2
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2010/06/02 12:00 a.m.•36 views

JVN#36925871: e-Pares vulnerable to session fixation

e-Pares is a system that manages facility conference rooms, etc. information. e-Pares contains a session fixation vulnerability. Impact A remote attacker impersonating a logged in user may perform arbitrary operations. As a result, disclosure or alteration of information may occur. Solution Updat...

4CVSS6.5AI score0.0174EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2010/06/02 12:00 a.m.•52 views

JVN#82465391: e-Pares vulnerable to cross-site request forgery

e-Pares is a system that manages facility conference rooms, etc. information. e-Pares contains a cross-site request forgery vulnerability. Impact If a user views a malicious page while logged into e-Pares, facility reservation data may be altered. Solution Update the Software Update to the latest...

2.6CVSS6.2AI score0.00824EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2010/06/02 12:00 a.m.•47 views

JVN#58439007: e-Pares vulnerable to cross-site scripting

e-Pares is a system that manages facility conference rooms, etc. information. e-Pares contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the latest version according to the information provide...

4.3CVSS5.9AI score0.01645EPSS
SaveExploits0
Exploit DB
Exploit DB
•added 2010/04/30 12:00 a.m.•46 views

Private Wire Gateway - Remote Buffer Overflow (Metasploit)

$Id: privatewiregateway.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

7.5CVSS5.8AI score0.6221EPSS
SaveExploits5
Tenable Nessus
Tenable Nessus
•added 2010/01/06 12:00 a.m.•39 views

CentOS 5 : dbus (CESA-2008:0159)

Updated dbus packages that fix an issue with circumventing the security policy are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. D-Bus is a system for sending messages between applications. It is used both for the system-wide...

4.6CVSS6.9AI score0.00404EPSS
SaveExploits2References3
zdt
zdt
•added 2009/10/26 12:00 a.m.•42 views

SharePoint 2007 Team Services source code disclosure

Exploit for unknown platform in category web applications ==================================================== SharePoint 2007 Team Services source code disclosure ==================================================== ======= Summary ======= Name: SharePoint Team Services source code disclosure...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2009/10/26 12:00 a.m.•57 views

SharePoint 2007 - Team Services Source Code Disclosure

======= Summary ======= Name: SharePoint Team Services source code disclosure through download facility Release Date: 21 October 2009 Reference: NGS00532 Discover: Daniel Martin Vendor: Microsoft Systems Affected: SharePoint 2007 12.0.0.6219, 12.0.0.4518 and possibly others Risk: Medium Status:...

5CVSS5.8AI score0.32606EPSS
SaveExploits2
zdt
zdt
•added 2009/03/23 12:00 a.m.•52 views

Rittal CMC-TC Processing Unit II Multiple Vulnerabilities

Exploit for hardware platform in category remote exploits ========================================================= Rittal CMC-TC Processing Unit II Multiple Vulnerabilities ========================================================= Louhi Networks Oy -= Security Advisory =- Advisory: Rittal CMC-TC...

7.1AI score
SaveExploits0
Prion
Prion
•added 2009/03/10 2:30 p.m.•28 views

Design/Logic Flaw

The HRM-S service in Fujitsu Enhanced Support Facility 3.0 and 3.0.1 allows remote attackers to obtain 1 hardware and 2 software information via unspecified requests in a client connection...

5CVSS6.9AI score0.01218EPSS
SaveExploits0References4Affected Software1
NVD
NVD
•added 2009/03/10 2:30 p.m.•23 views

CVE-2009-0867

The HRM-S service in Fujitsu Enhanced Support Facility 3.0 and 3.0.1 allows remote attackers to obtain 1 hardware and 2 software information via unspecified requests in a client connection...

5CVSS6.4AI score0.01218EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2009/03/10 2:00 p.m.•31 views

CVE-2009-0867

The HRM-S service in Fujitsu Enhanced Support Facility 3.0 and 3.0.1 allows remote attackers to obtain 1 hardware and 2 software information via unspecified requests in a client connection...

6.4AI score0.01218EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/03/10 12:00 a.m.•7 views

CVE-2009-0867: Exposure of Sensitive Information to an Unauthorized Actor

The HRM-S service in Fujitsu Enhanced Support Facility 3.0 and 3.0.1 allows remote attackers to obtain 1 hardware and 2 software information via unspecified requests in a client connection...

5CVSS5.8AI score0.01218EPSS
SaveExploits0References2
Rows per page
Query Builder