Threat Outbreak Alert RuleID15996: Email Messages Distributing Malicious Software on June 16, 2015

Medium Alert ID: 39372 First Published: 2015 June 16 14:16 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID15996 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID15992: Email Messages Distributing Malicious Software on June 15, 2015

Medium Alert ID: 39369 First Published: 2015 June 16 14:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID15992 may contain the following files: Name | Siz...

CVE-2015-4381

Cross-site scripting XSS vulnerability in the Invoice module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.3 for Drupal allows remote authenticated users with the "Administer own invoices" permission to inject arbitrary web script or HTML via unspecified vectors involving nodes of the "Invoice"...

Cross site scripting

Cross-site scripting XSS vulnerability in the Invoice module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.3 for Drupal allows remote authenticated users with the "Administer own invoices" permission to inject arbitrary web script or HTML via unspecified vectors involving nodes of the "Invoice"...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the Invoice module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.3 for Drupal allow remote attackers to hijack the authentication of arbitrary users for requests that 1 create, 2 delete, or 3 alter invoices via unspecified vectors...

CVE-2015-4382

Multiple cross-site request forgery CSRF vulnerabilities in the Invoice module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.3 for Drupal allow remote attackers to hijack the authentication of arbitrary users for requests that 1 create, 2 delete, or 3 alter invoices via unspecified vectors...

CVE-2015-4382

CVE-2015-4382 refers to CSRF vulnerabilities in the Drupal Invoice contributed module. Impacted versions are 6.x-1.x prior to 6.x-1.2 and 7.x-1.x prior to 7.x-1.3, allowing remote attackers to hijack the authentication of arbitrary users to perform invoices-related actions (create, delete, or alt...

CVE-2015-4381

Cross-site scripting XSS vulnerability in the Invoice module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.3 for Drupal allows remote authenticated users with the "Administer own invoices" permission to inject arbitrary web script or HTML via unspecified vectors involving nodes of the "Invoice"...

CVE-2015-4381

The CVE-2015-4381 entry affects the Drupal Invoice contributed module (versions 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.3). The issue is a Cross-Site Scripting (XSS) vulnerability that can be exploited by remote authenticated users who have the "Administer own invoices" permission to inje...

Threat Outbreak Alert RuleID4626: Email Messages Distributing Malicious Software on January 27, 2016

Medium Alert ID: 39317 First Published: 2015 June 11 17:35 GMT Last Updated: 2016 January 28 13:48 GMT Version: 63 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID4626KVR...

Threat Outbreak Alert RuleID15593: Email Messages Distributing Malicious Software on May 29, 2015

Medium Alert ID: 39121 First Published: 2015 May 30 02:13 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID15593 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID15580: Email Messages Distributing Malicious Software on May 28, 2015

Medium Alert ID: 39055 First Published: 2015 May 29 13:47 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID15580 may contain the following files: Name | Size...

SQL injection vulnerability in the id parameter of Ticketmaster ERP web-based ticketing system/Finance/Invoice_detail.aspx?id=.

Ltd. Ticketmaster ERP management system is a special ticket management system for air ticket agents, integrating online booking management, telephone recording screen, corporate travel management, order management in the same industry, membership management, points management, SMS sending, staff...

Threat Outbreak Alert RuleID15433: Email Messages Distributing Malicious Software on May 21, 2015

Medium Alert ID: 38956 First Published: 2015 May 22 12:54 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID15433 may contain the following files: Name | Size...

Simple Invoice 2011 Cross Site Scripting

Affected software: simple invoice Type of vulnerability:stored xss URL:simpleinvoices.org Discovered by: provensec Website: provensec.com version:2011 Proof of concept goto http://demo.simpleinvoices.org/index.php?module=paymenttypes&view=manage add new or edit some older payment type and fill th...

Drupal Invoice Module Cross-Site Request Forgery Vulnerability

Drupal is a free and open source content management system developed in PHP. A cross-site request forgery vulnerability exists in Drupal Invoice, which allows remote attackers to construct malicious URIs, trick users into parsing them, and can target user contexts to perform malicious actions...

Simple Invoice 2011.1 Cross Site Request Forgery

Affected software: simple invoice Type of vulnerability:adding admin user via csrf URL:simpleinvoices.org Discovered by: provensec Website: provensec.com version:2011.1 Proof of concept...

Threat Outbreak Alert RuleID15224: Email Messages Distributing Malicious Software on May 11, 2015

Medium Alert ID: 38784 First Published: 2015 May 12 19:59 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID15224 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID15144: Email Messages Distributing Malicious Software on May 7, 2015

Medium Alert ID: 38736 First Published: 2015 May 8 14:14 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID15144 may contain the following files: Name | Size ...

Threat Outbreak Alert RuleID15074: Email Messages Distributing Malicious Software on May 5, 2015

Medium Alert ID: 38664 First Published: 2015 May 4 18:47 GMT Last Updated: 2015 May 6 12:24 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID15074 and...