3078 matches found
PT-2016-7115 · Apache +5 · Apache Tomcat +5
Name of the Vulnerable Software and Affected Versions: Apache Tomcat versions 9.0.0.M1 through 9.0.0.M9 Apache Tomcat versions 8.5.0 through 8.5.4 Apache Tomcat versions 8.0.0.RC1 through 8.0.36 Apache Tomcat versions 7.0.0 through 7.0.70 Apache Tomcat versions 6.0.0 through 6.0.45 Description: A...
SQL injection vulnerability in the NewUserName parameter of the getquestion.jsp page of the government information system of Fujian Xingyu Information Technology Co.
The open government information platform is a WEB system that strengthens the construction and management of open government information through informatization means. There is a SQL injection vulnerability in the modified product, the vulnerability URL is:...
Pan micro-OA system /web/broswer/SectorInfoBrowser. the jsp blind
No description provided by source...
whirOA /defaultroot/public/jsp/goodsphotoupload. jsp file upload vulnerability
No description provided by source...
whirOA download. jsp arbitrary File Download
No description provided by source...
Thousand OA /defaultroot/public/editor/tpsc. jsp file upload vulnerability
No description provided by source...
Wowza Streaming Engine 4.5.0 - Multiple Cross-Site Scripting Vulnerabilities
Wowza Streaming Engine 4.5.0 - Multiple Cross-Site Scripting Vulnerabilities Wowza Streaming Engine 4.5.0 Multiple Cross-Site Scripting Vulnerabilities Vendor: Wowza Media Systems, LLC. Product web page: https://www.wowza.com Affected version: 4.5.0 build 18676 Platform: JSP Summary: Wowza...
Wowza Streaming Engine 4.5.0 - Remote Privilege Escalation
input type="hidden" name="action" value="quickEd...
Wowza Streaming Engine 4.5.0 Cross Site Request Forgery
i? Wowza Streaming Engine 4.5.0 CSRF Add Advanced Admin Exploit Vendor: Wowza Media Systems, LLC. Product web page: https://www.wowza.com Affected version: 4.5.0 build 18676 Platform: JSP Summary: Wowza Streaming Engine is robust, customizable, and scalable server software that powers reliable...
Wowza Streaming Engine 4.5.0 - Multiple Cross-Site Scripting
Exploit for multiple platform in category web applications Wowza Streaming Engine 4.5.0 Multiple Cross-Site Scripting Vulnerabilities Vendor: Wowza Media Systems, LLC. Product web page: https://www.wowza.com Affected version: 4.5.0 build 18676 Platform: JSP Summary: Wowza Streaming Engine is...
Wowza Streaming Engine 4.5.0 - Multiple Cross-Site Scripting Vulnerabilities
Wowza Streaming Engine 4.5.0 Multiple Cross-Site Scripting Vulnerabilities Vendor: Wowza Media Systems, LLC. Product web page: https://www.wowza.com Affected version: 4.5.0 build 18676 Platform: JSP Summary: Wowza Streaming Engine is robust, customizable, and scalable server software that powers...
The vulnerability of the Apache Tomcat software allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of “Unrestricted File Upload” in Apache Tomcat, along with outdated code for java.io.File and non-standard JMX configurations, allows malicious actors to execute arbitrary code by uploading a JSP file and gaining access to it...
[SECURITY] Fedora 24 Update: struts-1.3.10-18.fc24
Welcome to the Struts Framework! The goal of this project is to provide an open source framework useful in building web applications with Java Servlet and JavaServer Pages JSP technology. Struts encourages application architectures based on the Model-View-Controller MVC design paradigm,...
[SECURITY] Fedora 23 Update: struts-1.3.10-18.fc23
Welcome to the Struts Framework! The goal of this project is to provide an open source framework useful in building web applications with Java Servlet and JavaServer Pages JSP technology. Struts encourages application architectures based on the Model-View-Controller MVC design paradigm,...
FSMCMS jspdownload. jsp download vulnerability
No description provided by source...
Dahan VC arttop_interface. jsp injection vulnerability
No description provided by source...
Oracle Application Testing Suite (ATS) - Arbitrary File Upload (Metasploit)
Exploit for java platform in category remote exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Oracle ATS Arbitrary File Upload', 'Description' = %q This module exploits an authentication...
Oracle Application Testing Suite (ATS) - Arbitrary File Upload (Metasploit)
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Oracle ATS Arbitrary File Upload', 'Description' = %q This module exploits an authentication bypass and arbitrary file upload in Oracle Applicatio...
Oracle ATS Arbitrary File Upload
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Oracle ATS Arbitrary File Upload', 'Description' = %q This module exploits an authentication bypass and arbitrary file upload in Oracle Applicatio...