1126 matches found
Ipswitch WhatsUp Gold SQL Injection Vulnerability
Ipswitch WhatsUp Gold is a unified suite of infrastructure and application monitoring software. IPswitch WhatsUp Gold suffers from a SQL injection vulnerability. Failure to properly filter the 'UniqueID' parameter allows remote attackers to exploit the vulnerability to submit specially crafted SQ...
IPswitch WhatsUp Gold contains multiple XSS vulnerabilities and a SQLi
Overview IPSwitch's WhatsUp Gold version 16.3, and possibly previous versions, is vulnerable to SQL injection and cross-site scripting attacks. Description CWE-89: Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' - CVE-2015-6004The "Find Device" search field does...
Ipswitch WhatsUp Gold Directory Traversal Vulnerability
Ipswitch WhatsUp Gold is a Windows-based network monitoring application. Ipswitch WhatsUp Gold suffers from a directory traversal vulnerability that could allow a remote attacker to read arbitrary files via an RRQ operation in the file name field...
Directory traversal
Directory traversal vulnerability in the TFTP Server 1.0.0.24 in Ipswitch WhatsUp Gold allows remote attackers to read arbitrary files via a .. dot dot in the Filename field of an RRQ operation...
CVE-2011-4722
Directory traversal vulnerability in the TFTP Server 1.0.0.24 in Ipswitch WhatsUp Gold allows remote attackers to read arbitrary files via a .. dot dot in the Filename field of an RRQ operation...
CVE-2011-4722
CVE-2011-4722 is a directory traversal vulnerability in Ipswitch WhatsUp Gold’s TFTP Server 1.0.0.24 that allows remote attackers to read arbitrary files via a .. sequence in the Filename field of an RRQ request. Public materials describe exploitation via a Metasploit module targeting WhatsUp Gol...
CVE-2011-4722
Directory traversal vulnerability in the TFTP Server 1.0.0.24 in Ipswitch WhatsUp Gold allows remote attackers to read arbitrary files via a .. dot dot in the Filename field of an RRQ operation...
IPSwitch IMAIL LDAP Overflow - Ver2 (CVE-2004-0297)
The LDAP protocol elements are encoded for exchange using ASN.1 Basic Encoding Rules BER. Buffer overflow vulnerabilities exist in the LDAP component of IPSwitch's IMail server. The vulnerable LDAP daemon does not properly validate the content of an LDAP message. The vulnerability allows both DoS...
CVE-2011-4722: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in the TFTP Server 1.0.0.24 in Ipswitch WhatsUp Gold allows remote attackers to read arbitrary files via a .. dot dot in the Filename field of an RRQ operation...
Ipswitch IMail Server 11.x / 12.x < 12.4.1.15 Multiple Vulnerabilities (Heartbleed)
The remote host appears to be running Ipswitch IMail Server 11.x or 12.x older than version 12.4.1.15 and is, therefore, potentially affected by the following vulnerabilities : - An error exists related to the implementation of the Elliptic Curve Digital Signature Algorithm ECDSA that could allow...
Ipswitch IMail Server 11.x / 12.x < 12.3 Information Disclosure
The remote host appears to be running Ipswitch IMail Server 11.x or 12.x older than version 12.3 and is, therefore, affected by an information disclosure vulnerability due to the included OpenSSL version. An error exists related to the SSL/TLS/DTLS protocols, CBC mode encryption and response time...
Ipswitch WhatsUp Professional 2005 SP1 LOGIN.ASP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14039/info WhatsUp Professional is prone to an SQL injection vulnerability affecting its Web-based front end. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'login.asp'...
Ipswitch WS_FTP 2007 Professional WSFTPURL.EXE Local Memory Corruption Vulnerability
No description provided by source...
Ipswitch WhatsUp Professional 2006 Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/16771/info Ipswitch WhatsUp Professional 2006 is susceptible to a remote denial-of-service vulnerability. This issue is due to the application's failure to properly handle certain HTTP GET requests. This issue allows remo...
Ipswitch IMail 11.01 - XSS Vulnerability
No description provided by source. !/usr/bin/perl Exploit Title: Ipswitch IMail 11.01 XSS Vulnerability Date: 26-04-2013 Author: DaOne aka Mocking Bird Vendor Homepage: http://www.ipswitch.com/ Platform: windows use Net::SMTP; ARGV Check if $ARGV != 2 print \nUSAGE: IMail.pl Mail Server Attacker...
Ipswitch Instant Messaging 2.0.8.1 Multiple Security Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/27677/info Ipswitch Instant Messaging is prone to multiple security vulnerabilities, including a denial-of-service vulnerability, a format-string vulnerability, and a vulnerability that allows attackers to overwrite...
IPSwitch IMail Server <= 8.20 IMAPD Remote Buffer Overflow Exploit
No description provided by source. / Dreatica-FXP crew ---------------------------------------- Target : Ipswitch IMAIL Server IMAPD 7.13 - 8.20 exploit Site : http://www.ipswitch.com Found by : iDEFENSE Security http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=243...
IPSwitch IMAP Server <= 9.20 Remote Buffer Overflow Exploit
No description provided by source. / Ipsbitch.cpp vs Ipswitch IMAP Tested on: Windows 2000 SP4 Ref: CVE-2007-2795 Author: Dominic Chell [email protected] Found this half written on a VM so decided to finish it. Payload adds a local admin account USER=r00t PASS=r00tr00t!! / include stdafx.h inclu...
IPSwitch WhatsUp Small Business 2004 Report Service Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15291/info IPSwitch WhatsUp Small Business 2004 is prone to a directory traversal vulnerability. Successful exploitation could allow a remote attacker to gain access to files outside the Web root. Sensitive information ma...
Ipswitch IMail Server 7/8 Weak Password Encryption Weakness
No description provided by source. source: http://www.securityfocus.com/bid/10956/info Ipswitch IMail is reported to use a weak encryption algorithm when obfuscating saved passwords. A local attacker who has the ability to read the encrypted passwords may easily derive the plaintext password if t...