CVE-2009-4595

SQL injection vulnerability in index.php in PHP Inventory 1.2 allows remote authenticated users to execute arbitrary SQL commands via the supid parameter in a suppliers details action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party informatio...

CVE-2009-4596

Cross-site scripting XSS vulnerability in index.php in PHP Inventory 1.2 allows remote attackers to inject arbitrary web script or HTML via the supid parameter in a suppliers details action...

CVE-2009-4597

Multiple SQL injection vulnerabilities in index.php in PHP Inventory 1.2 allow 1 remote authenticated users to execute arbitrary SQL commands via the userid parameter in a users details action, and allow remote attackers to execute arbitrary SQL commands via the 2 user username and 3 pass passwor...

CVE-2009-4595

Summary of CVE-2009-4595 : PHP Inventory vulnerable to SQL injection via index.php in version 1.2 (also affects related tracked versions). The issue stems from unsanitized input in the sup_id parameter used in the suppliers details action, allowing (authenticated) users to craft arbitrary SQL. Mu...

CVE-2009-4597

The CVE-2009-4597 entry covers SQL injection flaws in PHP Inventory (notably versions around 1.2/1.3.x) in index.php. The vulnerabilities allow SQL commands to be injected through user_id in a user details action, and through user/password fields, enabling unauthorized data access via poorly sani...

CVE-2009-4596: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in PHP Inventory 1.2 allows remote attackers to inject arbitrary web script or HTML via the supid parameter in a suppliers details action...

CVE-2009-4597: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in index.php in PHP Inventory 1.2 allow 1 remote authenticated users to execute arbitrary SQL commands via the userid parameter in a users details action, and allow remote attackers to execute arbitrary SQL commands via the 2 user username and 3 pass passwor...

CVE-2009-4595: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in PHP Inventory 1.2 allows remote authenticated users to execute arbitrary SQL commands via the supid parameter in a suppliers details action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party informatio...

PHP Inventory 1.2 SQL Injection

PHP Inventory v1.2 Remote Auth Bypass SQL Injection Vulnerabiity Found By: mrme Download: http://www.phpwares.com/content/php-inventory Tested On: Windows Vista Note: For educational purposes only First of all lets login to admin with: http://server/php-inventory/index.php username: ' or 1=1--...

PHP Inventory v1.2 Remote (Auth Bypass) SQL Injection Vulnerabiity

Exploit for unknown platform in category web applications ================================================================== PHP Inventory v1.2 Remote Auth Bypass SQL Injection Vulnerabiity ================================================================== PHP Inventory v1.2 Remote Auth Bypass SQ...

PHP Inventory v1.2 Remote (Auth Bypass) SQL Injection Vulnerabiity

No description provided by source. PHP Inventory v1.2 Remote Auth Bypass SQL Injection Vulnerabiity Found By: mrme Download: http://www.phpwares.com/content/php-inventory Tested On: Windows Vista Note: For educational purposes only First of all lets login to admin with:...

PHP Inventory 1.2 - Authentication Bypass

PHP Inventory 1.2 - Authentication Bypass PHP Inventory v1.2 Remote Auth Bypass SQL Injection Vulnerabiity Found By: mrme Download: http://www.phpwares.com/content/php-inventory Tested On: Windows Vista Note: For educational purposes only First of all lets login to admin with:...

PHP Inventory 1.2 - Authentication Bypass

PHP Inventory v1.2 Remote Auth Bypass SQL Injection Vulnerabiity Found By: mrme Download: http://www.phpwares.com/content/php-inventory Tested On: Windows Vista Note: For educational purposes only First of all lets login to admin with: http://server/php-inventory/index.php username: ' or 1=1--...

HP Discovery & Dependency Mapping Inventory code execution

No description provided...

CPE Inventory

This routine uses information collected by other routines about CPE identities of operating systems, services and applications detected during the scan. Note: Some CPEs for specific products might show up twice or more in the output. Background: After a product got renamed or a specific vendor wa...

CVE-2009-3841

Unspecified vulnerability in HP Discovery & Dependency Mapping Inventory DDMI 2.5x, 7.5x, and 7.60 on Windows allows remote authenticated users to execute arbitrary code via unknown vectors...

CVE-2009-3841

HP Discovery & Dependency Mapping Inventory (DDMI) running on Windows versions 2.5x, 7.5x, and 7.60 is affected by CVE-2009-3841. The HP Security Bulletin SSRT090188 rev.1 states a remote execution of arbitrary code by an authorized user, with the base CVSS 2.0 score of 9.0. Patched versions are ...

CVE-2009-3841: Undefined Security Weakness

Unspecified vulnerability in HP Discovery & Dependency Mapping Inventory DDMI 2.5x, 7.5x, and 7.60 on Windows allows remote authenticated users to execute arbitrary code via unknown vectors...

ClearSite 4.50 (cs_base_path) Remote File Inclusion Vulnerability

No description provided by source. Network Management/Inventory System header.php Remote File Include Vulnerability ----------------------------------------------------------------------------------...

ClearSite 4.50 (cs_base_path) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================= ClearSite 4.50 csbasepath Remote File Inclusion Vulnerability ================================================================= Network Management/Inventory System header.ph...