6208 matches found
CVE-2018-18804
Bakeshop Inventory System 1.0 has SQL injection via the login screen, related to include/publicfunction.vb...
CVE-2018-18804
CVE-2018-18804 affects Bakeshop Inventory System 1.0, with an SQL injection on the login screen due to the code path include/publicfunction.vb (string-concatenated SQL). CNVD-2019-00381 confirms a remote SQL injection vulnerability that enables an attacker to view, modify, or delete data in the b...
PT-2018-14665
Name of the Vulnerable Software and Affected Versions Bakeshop Inventory System version 1.0 Description The issue is related to SQL injection via the login screen. It is connected to the include/publicfunction.vb file. Recommendations For Bakeshop Inventory System version 1.0, consider restrictin...
CVE-2018-18804: Improper Neutralization of Special Elements used in an SQL Command
Bakeshop Inventory System 1.0 has SQL injection via the login screen, related to include/publicfunction.vb...
Webiness Inventory 2.3 - Arbitrary File Upload / Cross-Site Request Forgery (Add Admin)
Exploit for php platform in category web applications Exploit Title: Webiness Inventory 2.3 - Arbitrary File Upload / Cross-Site Request Forgery Add Admin Exploit Author: Ihsan Sencan Vendor Homepage: https://github.com/webiness/webinessinventory Software Link:...
OCS Inventory NG ocsreports Shell Upload
Request 1 This request creates a temporary file containing PHP code in the /usr/share/ocsinventory-reports/ocsreports/a.php.a/ directory. POST /ocsreports/index.php?function=telepackage HTTP/1.1 Host: 192.168.5.135 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64; rv:61.0 Gecko/20100101...
Webiness Inventory 2.3 Cross Site Request Forgery / Shell Upload
Exploit Title: Webiness Inventory 2.3 - Arbitrary File Upload / Cross-Site Request Forgery Add Admin Dork: N/A Date: 2018-11-11 Exploit Author: Ihsan Sencan Vendor Homepage: https://github.com/webiness/webinessinventory Software Link:...
Webiness Inventory 2.3 SQL Injection
Exploit Title: Webiness Inventory 2.3 - SQL Injection Dork: N/A Date: 2018-11-11 Exploit Author: Ihsan Sencan Vendor Homepage: https://github.com/webiness/webinessinventory Software Link: https://kent.dl.sourceforge.net/project/webinessinventory/2.3/webinessinventory-2.3.zip Version: 2.3 Category...
Webiness Inventory 2.3 - SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Webiness Inventory 2.3 - SQL Injection Exploit Author: Ihsan Sencan Vendor Homepage: https://github.com/webiness/webinessinventory Software Link:...
OCS Inventory NG ocsreports Shell Upload Vulnerability
OCS Inventory NG suffers from an ocsreports authenticated remote code execution vulnerability via a shell upload. OCS Inventory NG ocsreports Shell Upload Request 1 This request creates a temporary file containing PHP code in the /usr/share/ocsinventory-reports/ocsreports/a.php.a/ directory. POST...
CISO series: Lessons learned—4 priorities to achieve the largest security improvements
In my past life as CISO, Ive worked for small companies, state governments, and large enterprises, and one thing that has been true at all of them is that there is an infinite number of security initiatives in each organization you could implement, yet the resources to accomplish those tasks are...
Webiness Inventory 2.3 - order SQL Injection
Webiness Inventory 2.3 - order SQL Injection Exploit Title: Webiness Inventory 2.3 - SQL Injection Dork: N/A Date: 2018-11-11 Exploit Author: Ihsan Sencan Vendor Homepage: https://github.com/webiness/webinessinventory Software Link:...
Webiness Inventory 2.3 - Arbitrary File Upload Cross-Site Request Forgery (Add Admin)
Webiness Inventory 2.3 - Arbitrary File Upload Cross-Site Request Forgery Add Admin Exploit Title: Webiness Inventory 2.3 - Arbitrary File Upload / Cross-Site Request Forgery Add Admin Dork: N/A Date: 2018-11-11 Exploit Author: Ihsan Sencan Vendor Homepage:...
Webiness Inventory 2.3 - Arbitrary File Upload / Cross-Site Request Forgery (Add Admin)
Exploit Title: Webiness Inventory 2.3 - Arbitrary File Upload / Cross-Site Request Forgery Add Admin Dork: N/A Date: 2018-11-11 Exploit Author: Ihsan Sencan Vendor Homepage: https://github.com/webiness/webinessinventory Software Link:...
MGASA-2018-0439 Updated ansible package fixes security vulnerabilities
It was found that inventory variables are loaded from current working directory when running ad-hoc command which are under attacker's control, allowing to run arbitrary code as a result CVE-2018-10874. It was found that ansible.cfg is being read from the current working directory, which can be...
Bakeshop Inventory System in VB.Net and MS Access Database 1.0 - SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Bakeshop Inventory System in VB.Net and MS Access Database 1.0 - SQL Injection Exploit Author: Ihsan Sencan Vendor Homepage: https://www.sourcecodester.com/users/janobe Software Link:...
Webiness Inventory 2.9 - Arbitrary File Upload Vulnerability
Exploit for php platform in category web applications Exploit Title: Webiness Inventory 2.9 - Arbitrary File Upload Exploit Author: Boumediene KADDOUR Unit: Algerie Telecom R&D Unit Software Link: https://github.com/webiness/webinessinventory Version: 2.9 3145728 61 continue; 62 63 64 // remove o...
Webiness Inventory 2.9 - Arbitrary File Upload
Webiness Inventory 2.9 - Arbitrary File Upload Exploit Title: Webiness Inventory 2.9 - Arbitrary File Upload Date: 2018-10-27 Exploit Author: Boumediene KADDOUR Unit: Algerie Telecom R&D Unit Software Link: https://github.com/webiness/webinessinventory Version: 2.9 3145728 61 continue; 62 63 64 /...
Webiness Inventory 2.9 - Arbitrary File Upload
Exploit Title: Webiness Inventory 2.9 - Arbitrary File Upload Date: 2018-10-27 Exploit Author: Boumediene KADDOUR Unit: Algerie Telecom R&D Unit Software Link: https://github.com/webiness/webinessinventory Version: 2.9 3145728 61 continue; 62 63 64 // remove old file with same name 65 if...
