Intermedia AppID - BSD license, Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Intermedia AppID published at the 'play' market has multiple vulnerabilities...

Aloaha Credential Provider Monitor 5.0.226 Local Privilege Escalation Vulnerability

No description provided by source. Aloaha Credential Provider Monitor 5.0.226 Local Privilege Escalation Vulnerability Vendor: Aloaha Software - Wrocklage Intermedia GmbH Product web page: http://www.aloaha.com Affected version: 5.0.226 Summary: Aloaha Credential Provider represents one of the mo...

Aloaha Credential Provider Monitor 5.0.226 - Local Privilege Escalation

Aloaha Credential Provider Monitor 5.0.226 - Local Privilege Escalation Aloaha Credential Provider Monitor 5.0.226 Local Privilege Escalation Vulnerability Vendor: Aloaha Software - Wrocklage Intermedia GmbH Product web page: http://www.aloaha.com Affected version: 5.0.226 Summary: Aloaha...

Aloaha Credential Provider Monitor 5.0.226 Local Privilege Escalation Vulnerability

Summary Aloaha Credential Provider represents one of the most dramatic changes in the Windows Vista / 7 logon screen, making it much easier to implement new user authentication scenarios that are supported by the OS. To be able to logon via Smartcard to a windows machine requires usually the...

Aloaha Credential Provider Monitor 5.0.226 - Local Privilege Escalation

Aloaha Credential Provider Monitor 5.0.226 Local Privilege Escalation Vulnerability Vendor: Aloaha Software - Wrocklage Intermedia GmbH Product web page: http://www.aloaha.com Affected version: 5.0.226 Summary: Aloaha Credential Provider represents one of the most dramatic changes in the Windows...

Trol Intermedia SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x Official Website: http://www.1337day.com 0 1 x...

Trol Intermedia - SQL Injection Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x...

Oracle Database Multiple Vulnerabilities (July 2006 CPU)

The remote Oracle database server is missing the July 2006 Critical Patch Update CPU and therefore is potentially affected by security issues in the following components : - Change Data Capture CDC - Core RDBMS - Data Pump Metadata API - Dictionary - Export - InterMedia - OCI - Oracle ODBC Driver...

Oracle Database InterMedia Denial of Service

Oracle Database Server is an enterprise-level relational database application suite. In addition to common basic data types, such as INT or VARCHAR, Oracle uses specialized object types to store and manage complex data objects, such as images and audio/video data. Object types are conceptually...

Intermedia web design Admin Login Bypass vulnerability

Exploit for php platform in category web applications ====================================================== Intermedia web design Admin Login Bypass vulnerability ====================================================== Home : www.kiteknology.com Vunlerability : Admin Bypass Risk : High Dork :...

Multiple SQL Injection Flaws in Oracle CTX_DOC package

NGSSoftware Insight Security Research Advisory Name: Multiple SQL Injection Flaws in Oracle CTXDOC package Systems Affected: Oracle 10g release 1 and 2 Severity: High Vendor URL: http://www.oracle.com/ Author: David Litchfield [email protected] Reported: 6 June 2005 Date of Public Advisory:...

Oracle interMedia多个SQL注入漏洞

InterMedia是Oracle推出的对Oracle8i多媒体功能的扩充。 InterMedia不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 InterMedia包含的CTXDOC包存在多个SQL注入缺陷。如下的过程存在此漏洞： THEMES GIST TOKENS FILTER HIGHLIGHT MARKUP 数据库用户可通过这些漏洞不需要用户ID和密码访问Oracle应用程序服务器。 Oracle Oracle9i Application Server 9.2 .8 Oracle Oracle10g Standard...

CVE-2007-5508

Multiple SQL injection vulnerabilities in the CTXSYS Intermedia application for the Oracle Text component CTXDOC in Oracle Database 10.1.0.5 and 10.2.0.3 allow remote authenticated users to execute arbitrary SQL commands via the 1 THEMES, 2 GIST, 3 TOKENS, 4 FILTER, 5 HIGHLIGHT, and 6 MARKUP...

CVE-2007-5508

CVE-2007-5508 concerns the CTXSYS Intermedia/Oracle Text component (CTX_DOC) in Oracle Database 10.1.0.5 and 10.2.0.3. The vulnerability enables SQL injection via six procedures (THEMES, GIST, TOKENS, FILTER, HIGHLIGHT, MARKUP), with remote authenticated users able to execute arbitrary SQL comman...

CVE-2007-5508

Multiple SQL injection vulnerabilities in the CTXSYS Intermedia application for the Oracle Text component CTXDOC in Oracle Database 10.1.0.5 and 10.2.0.3 allow remote authenticated users to execute arbitrary SQL commands via the 1 THEMES, 2 GIST, 3 TOKENS, 4 FILTER, 5 HIGHLIGHT, and 6 MARKUP...

CVE-2006-3703

Unspecified vulnerability in InterMedia for Oracle Database 9.0.1.5, 9.2.0.6, and 10.1.0.4 has unknown impact and attack vectors, aka oracle Vuln DB07...

CVE-2006-3703

CVE-2006-3703 concerns InterMedia for Oracle Database across versions 9.0.1.5, 9.2.0.6, and 10.1.0.4. The description in the NVD entry characterizes this as an unspecified vulnerability with unknown impact and attack vectors, and the connected data confirms InterMedia as the affected component wi...

CVE-2006-3703

Unspecified vulnerability in InterMedia for Oracle Database 9.0.1.5, 9.2.0.6, and 10.1.0.4 has unknown impact and attack vectors, aka oracle Vuln DB07...

[AppSecInc Team SHATTER Security Advisory] Denial of Service in Oracle interMedia

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Denial of Service in Oracle interMedia AppSecInc Team SHATTER Security Advisory http://www.appsecinc.com/resources/alerts/oracle/2005-01.html April 18, 2005 Affected versions: Oracle Database Server versions 9i and 10g Risk level: Medium Credits: This...