244 matches found
Moderate: Red Hat Security Advisory: Red Hat Gluster Storage 3.2.0 security, bug fix, and enhancement update
An update is now available for Red Hat Gluster Storage 3.2 on Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
HiMall Multi-User Mall System Exists Arbitrary Password Reset Vulnerability
Hishop multi-user mall system is a multi-store support multi-vendor stationed, mainly for high-end customers, for traditional enterprises and large and medium-sized online business to improve the operational capacity of merchants as the core, similar to Jingdong, Tmall e-commerce platform. Hishop...
Arbitrary Password Changing Vulnerability in Hi-Read Media's Digital Newspaper System
Joy Reading Kiosk Digital Newspaper System is a digital newspaper WEB management system. The product /www/index.php?mod=admin&con=adminuser&act=editpost there is an arbitrary password change vulnerability, an attacker can exploit the vulnerability by submitting a POST request to change the...
SQL Injection Vulnerability in the Content Parameter of the /www/index.php Page of Hi-Read Media's Digital Newspaper System
Joy Reading Kiosk Digital Newspaper System is a digital newspaper WEB management system. There is a SQL injection vulnerability in this product, the vulnerability URL is: /www/index.php?mod=admin&con=review&content=1, the vulnerability parameter is: content, the attacker can use the vulnerability...
SQL Injection Vulnerability in the userId Parameter of Hi-Read Media's Digital Newspaper System
Joyful Reading Kiosk Digital Newspaper System is a digital newspaper WEB management system. The product has a SQL injection vulnerability, the vulnerability URL is: index.php?mod=admin&con=subscribe&act=unsubscribe&subsId=31&userId=880&paperscn=%B8%D6%CC%FA%C2%AF%C1%CF&papersen=gtll, the...
Hi Guess the Food - Base64 encoded String, Customized SSL, Exported ContentProvider vulnerabilities
HackApp vulnerability scanner discovered that application Hi Guess the Food published at the 'play' market has multiple vulnerabilities...
HI-Tier Meldeprogramm - Customized SSL, Insecure KeyStore vulnerabilities
HackApp vulnerability scanner discovered that application HI-Tier Meldeprogramm published at the 'play' market has multiple vulnerabilities...
Hi Locker - Your Lock Screen - Base64 encoded String, Customized SSL, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Hi Locker - Your Lock Screen published at the 'play' market has multiple vulnerabilities...
Hi-Q MP3 Voice Recorder (Free) - Exported ContentProvider, Exported components, External URLs vulnerabilities
HackApp vulnerability scanner discovered that application Hi-Q MP3 Voice Recorder Free published at the 'play' market has multiple vulnerabilities...
Hi Technology & Services CMS - SQL Injection Vulnerabilities
Document Title: =============== Hi Technology & Services CMS - SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1785 Release Date: ============= 2016-03-22 Vulnerability Laboratory ID VL-ID: ==================================...
Mail.ru: Reflected XSS on hi-tech.mail.ru
XSS in https://hi-tech.mail.ru/ https://hi-tech.mail.ru/ is not currently in bug bounty scope...
hi-fi.ru Open Redirect vulnerability
Open Bug Bounty ID: OBB-72032 Description| Value ---|--- Affected Website:| hi-fi.ru Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet Vulnerable URL...
hi-tuning.com XSS vulnerability
Open Bug Bounty ID: OBB-60999 Description| Value ---|--- Affected Website:| hi-tuning.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Shee...
Design/Logic Flaw
Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect integrity via unknown vectors related to AX/HI Web UI...
CVE-2015-0369
CVE-2015-0369 affects Oracle Siebel CRM (8.1.1 and 8.2.2) in the Siebel UI Framework (Portal Framework subcomponent). The Nessus plugin notes a vulnerability that can be exploited over the network via HTTP, enabling unauthorized read access to a subset of data exposed by the Siebel UI Framework. ...
CVE-2015-0369
Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect integrity via unknown vectors related to AX/HI Web UI...
Joomla Component com_virtuemart 1.0 - SQL Injection Vulnerability (product_id)
No description provided by source. Title: Joomla Component comvirtuemart SQL injection vulnerability productid Author: SOA Crew a.k.a Neo-GabrieL [email protected] visit us: http://indonesianhacker.com/ / Software Information Vendor : http://virtuemart.net/ Download : - Version : 1.0...
Mail.ru: Flash XSS - http://hi-tech.mail.ru/
Hello, I found a Flash based XSS in http://hi-tech.mail.ru/ Vulnerable link : http://hi-tech.mail.ru/img/flash/audio-player.swf?playerID=a"catchealertdocument.domain// Tested on Mozilla Firefox and Google Chrome. Regards, Florin...
Hi-Media SQL Injection
0101010101 010101010101010 01 01 0101 0101 01 01 0101 0101 01 01 0101 0101 01 01 0101 0101 01 01 0101 0101 01 01 0101 0101 01 01 0101010101 01 01 0101 010 01 01 0101 010 01 01 0101 010 01 01 0101 010 01 01 0101 010 0101010101 0101 010 + Exploit Title : hi-media Remote Sql Injection Vulnerability ...
