Astium VoIP PBX 安全漏洞

Astium VoIP PBX is an IP network-based telephone switching system from Astium. A security vulnerability exists in Astium VoIP PBX astium-confweb-2.1-25399 and prior versions, which stems from improper validation of input to the logon.php script, and could lead to SQL injection and remote code...

CVE-2013-10043: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability exists in OAstium VoIP PBX astium-confweb-2.1-25399 and earlier, where improper input validation in the logon.php script allows an attacker to bypass authentication via SQL injection. Once authenticated as an administrator, the attacker can upload arbitrary PHP code through the...

PT-2019-18519

Name of the Vulnerable Software and Affected Versions Artica Proxy version 3.06.200056 Description The issue allows remote attackers to execute arbitrary commands as root. This is achieved by reading the ldap admin and ldap password fields from the ressources/settings.inc file, using these...

CVE-2019-7300: Insufficiently Protected Credentials

Artica Proxy 3.06.200056 allows remote attackers to execute arbitrary commands as root by reading the ressources/settings.inc ldapadmin and ldappassword fields, using these credentials at logon.php, and then entering the commands in the admin.index.php command-line field...

CVE-2012-0900

Multiple cross-site scripting XSS vulnerabilities in Beehive Forum 1.0.1 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 forum/register.php or 2 forum/logon.php...

PT-2012-2934

Name of the Vulnerable Software and Affected Versions Beehive Forum version 1.0.1 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved by manipulating the PATH INFO to specific API endpoints, such as "forum/register.php" or "forum/logon.php"...

CVE-2012-0900: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Beehive Forum 1.0.1 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 forum/register.php or 2 forum/logon.php...

Sql injection

Multiple SQL injection vulnerabilities in SMartBlog aka SMBlog 1.3 allow remote attackers to execute arbitrary SQL commands via the 1 mois, 2 an, 3 jour, and 4 id parameters to index.php, and the 5 login parameter to gestion/logon.php, different vectors than CVE-2008-2183. NOTE: the provenance of...

CVE-2008-2184

Multiple SQL injection vulnerabilities in SMartBlog aka SMBlog 1.3 allow remote attackers to execute arbitrary SQL commands via the 1 mois, 2 an, 3 jour, and 4 id parameters to index.php, and the 5 login parameter to gestion/logon.php, different vectors than CVE-2008-2183. NOTE: the provenance of...

CVE-2008-2184: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in SMartBlog aka SMBlog 1.3 allow remote attackers to execute arbitrary SQL commands via the 1 mois, 2 an, 3 jour, and 4 id parameters to index.php, and the 5 login parameter to gestion/logon.php, different vectors than CVE-2008-2183. NOTE: the provenance of...