EUVD-2014-1064

Malware in sbrugna...

EUVD-2014-1066

Malware in sbrugna...

EUVD-2014-1065

Malware in sbrugna...

CVE-2014-100033

Directory traversal vulnerability in LicensePal ArcticDesk before 1.2.5 allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2014-100035

SQL injection vulnerability in the ticket grid in the admin interface in LicensePal ArcticDesk before 1.2.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-100035

SQL injection vulnerability in the ticket grid in the admin interface in LicensePal ArcticDesk before 1.2.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-100034

Cross-site scripting XSS vulnerability in the frontend interface in LicensePal ArcticDesk before 1.2.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-100033

Directory traversal vulnerability in LicensePal ArcticDesk before 1.2.5 allows remote attackers to read arbitrary files via unspecified vectors...

Directory traversal

Directory traversal vulnerability in LicensePal ArcticDesk before 1.2.5 allows remote attackers to read arbitrary files via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the frontend interface in LicensePal ArcticDesk before 1.2.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Sql injection

SQL injection vulnerability in the ticket grid in the admin interface in LicensePal ArcticDesk before 1.2.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-100035

CVE-2014-100035 corresponds to an SQL injection vulnerability in the ticket grid of the LicensePal ArcticDesk admin interface prior to version 1.2.5. The flaw allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Impact is indicated as partial confidentiality/integrit...

CVE-2014-100033

Directory traversal vulnerability in LicensePal ArcticDesk before 1.2.5 allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2014-100035

SQL injection vulnerability in the ticket grid in the admin interface in LicensePal ArcticDesk before 1.2.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-100034

The CVE-2014-100034 entry concerns LicensePal ArcticDesk frontend prior to 1.2.5, where an XSS flaw allows remote script/HTML injection via unspecified vectors. This is tied to the frontend interface and can affect users interacting with the 1.x series. The connected documents name a maintenance ...

CVE-2014-100033

CVE-2014-100033 affects LicensePal ArcticDesk prior to 1.2.5 and is a directory traversal vulnerability. The underlying issue allows remote attackers to read arbitrary files via unspecified vectors. Public references indicate a maintenance release (1.2.5) as the remedial fix. Details on exact vul...

CVE-2014-100034

Cross-site scripting XSS vulnerability in the frontend interface in LicensePal ArcticDesk before 1.2.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2015-3641

Name of the Vulnerable Software and Affected Versions LicensePal ArcticDesk versions prior to 1.2.5 Description A directory traversal issue allows remote attackers to read arbitrary files via unspecified vectors. Recommendations For versions prior to 1.2.5, update to version 1.2.5 or later to...

CVE-2014-100033: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in LicensePal ArcticDesk before 1.2.5 allows remote attackers to read arbitrary files via unspecified vectors...

PT-2015-3643

Name of the Vulnerable Software and Affected Versions LicensePal ArcticDesk versions prior to 1.2.5 Description A SQL injection issue exists in the ticket grid of the admin interface, allowing remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 1.2.5, update ...