6208 matches found
anyinventory-rfi.txt
AnyInventory = 1.9.1 Remote file inclusion Download script : http://physics.ramapo.edu/downloads/anyInventory-1.9.1.tar.gz Exploit : http://victime.com/anyInventorypath/environment.php?DIRPREFIX= shell.txt? Dork : anyInventory, the most flexible and powerful web-based inventory system Discovered ...
AnyInventory <= 1.9.1 (environment.php) Remote File Inclusion Vuln
No description provided by source. AnyInventory = 1.9.1 Remote file inclusion Download script : http://physics.ramapo.edu/downloads/anyInventory-1.9.1.tar.gz Exploit : http://victime.com/anyInventorypath/environment.php?DIRPREFIX= shell.txt? Dork : anyInventory, the most flexible and powerful...
CVE-2007-2344
The CVE-2007-2344 entry concerns the BOOTPD component in Enterasys NetSight Console 2.1 and NetSight Inventory Manager 2.1 (and possibly earlier) running on Windows. A remote attacker can cause a denial-of-service (daemon crash) by sending a UDP packet with an invalid “packet type” field. The ava...
CVE-2007-2343: Undefined Security Weakness
Stack-based buffer overflow in the TFTPD component in Enterasys NetSight Console 2.1 and NetSight Inventory Manager 2.1, and possibly earlier, allows remote attackers to execute arbitrary code via crafted request packets that contain long file names...
CVE-2007-2344: Undefined Security Weakness
The BOOTPD component in Enterasys NetSight Console 2.1 and NetSight Inventory Manager 2.1, and possibly earlier, on Windows allows remote attackers to cause a denial of service daemon crash via a UDP packet that contains an invalid "packet type" field...
Trend Micro ServerProtect Detection
The remote host is running Trend Micro ServerProtect for Windows / NetWare, an antivirus / antispyware for Windows and NetWare servers. C Tenable Network Security include"compat.inc"; if description scriptid24679; scriptversion"1.18"; scriptsetattributeattribute:"pluginmodificationdate",...
CVE-2006-5942
Cross-site scripting XSS vulnerability in inventory/display/displayresults.asp in Website Designs For Less Inventory Manager allows remote attackers to inject arbitrary web script or HTML via the category parameter...
CVE-2006-5943
Multiple SQL injection vulnerabilities in inventory/display/imager.asp in Website Designs for Less Inventory Manager allow remote attackers to execute arbitrary SQL commands via the 1 pictable, 2 picfield, or 3 where parameter...
CVE-2006-5942
Cross-site scripting XSS vulnerability in inventory/display/displayresults.asp in Website Designs For Less Inventory Manager allows remote attackers to inject arbitrary web script or HTML via the category parameter...
CVE-2006-5942
CVE-2006-5942 describes a Cross-site scripting (XSS) vulnerability in the Inventory Manager component of Website Designs For Less. The flaw occurs in inventory/display/display_results.asp, exploitable via the category parameter to inject arbitrary script/HTML. Affected: Inventory Manager; Impact:...
CVE-2006-5943: Undefined Security Weakness
Multiple SQL injection vulnerabilities in inventory/display/imager.asp in Website Designs for Less Inventory Manager allow remote attackers to execute arbitrary SQL commands via the 1 pictable, 2 picfield, or 3 where parameter...
CVE-2006-5943
Multiple SQL injection vulnerabilities in inventory/display/imager.asp in Website Designs for Less Inventory Manager allow remote attackers to execute arbitrary SQL commands via the 1 pictable, 2 picfield, or 3 where parameter...
CVE-2006-5942: Undefined Security Weakness
Cross-site scripting XSS vulnerability in inventory/display/displayresults.asp in Website Designs For Less Inventory Manager allows remote attackers to inject arbitrary web script or HTML via the category parameter...
CVE-2006-5943
CVE-2006-5943 describes multiple SQL injection vulnerabilities in inventory/display/imager.asp of Website Designs for Less Inventory Manager. The flaw allows remote attackers to inject SQL via the pictable, picfield, or where parameters, potentially leading to arbitrary SQL execution. The affecte...
inventorymanager.txt
vendor site:http://www.websitedesignsforless.com/ product:Inventory Manager bug:injection sql & xss get risk:medium injection sql : http://site.com/inventory/inventory/display/imager.asp?pictable='sql http://site.com/inventory/inventory/display/imager.asp?pictable=inventory&picfield=sql...
Inventory Manager [injection sql & xss (get)]
vendor site:http://www.websitedesignsforless.com/ product:Inventory Manager bug:injection sql & xss get risk:medium injection sql : http://site.com/inventory/inventory/display/imager.asp?pictable='sql http://site.com/inventory/inventory/display/imager.asp?pictable=inventory&picfield=sql...
IBM AIX Inventory Scout本地任意文件覆盖漏洞
IBM AIX是一款商业性质的UNIX操作系统。 IBM AIX的invscoutClientVPDSurvey在执行重要产品数据库调查时存在错误，可能允许本地攻击者覆盖任意文件的内容从而导致拒绝服务。 IBM AIX 5.3 IBM AIX 5.2 临时解决方法： 如果您不能立刻安装补丁或者升级，NSFOCUS建议您采取以下措施以降低威胁： 删除invscoutClientVPDSurvey的setuid位： chmod 555 /opt/IBMinvscout/bin/invscoutClientVPDSurvey 厂商补丁： IBM ---...
IBM AIX utilities multiple security vulnerabilities
Xclock buffer overflow; utape, cfgmgr, rdist, uucp, snappd, named8 and mkvg privilege escalation; slip.login and Inventory Scout arbitrary file overwrite...