57 matches found
CVE-2023-48644
An issue was discovered in the Archibus app 4.0.3 for iOS. There is an XSS vulnerability in the create work request feature of the maintenance module, via the description field. This allows an attacker to perform an action on behalf of the user, exfiltrate data, and so on...
CVE-2023-48645
An issue was discovered in the Archibus app 4.0.3 for iOS. It uses a local database that is synchronized with a Web central server instance every time the application is opened, or when the refresh button is used. There is a SQL injection in the search work request feature in the Maintenance modu...
CVE-2023-48645
An issue was discovered in the Archibus app 4.0.3 for iOS. It uses a local database that is synchronized with a Web central server instance every time the application is opened, or when the refresh button is used. There is a SQL injection in the search work request feature in the Maintenance modu...
CVE-2023-48645
Summary: CVE-2023-48645 affects Archibus app for iOS v4.0.3. A SQL injection exists in the local database used for the Maintenance module’s “search work request” feature, allowing queries on the local DB. The issue arises as the app synchronizes a local DB with a web central server each time it o...
CVE-2023-48645: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in the Archibus app 4.0.3 for iOS. It uses a local database that is synchronized with a Web central server instance every time the application is opened, or when the refresh button is used. There is a SQL injection in the search work request feature in the Maintenance modu...
CVE-2023-48645
An issue was discovered in the Archibus app 4.0.3 for iOS. It uses a local database that is synchronized with a Web central server instance every time the application is opened, or when the refresh button is used. There is a SQL injection in the search work request feature in the Maintenance modu...
PT-2024-13617 · Archibus · Archibus
Name of the Vulnerable Software and Affected Versions: Archibus app version 4.0.3 for iOS Description: An issue was discovered in the Archibus app, which uses a local database synchronized with a Web central server instance. There is a SQL injection in the search work request feature in the...
The vulnerability of the UltraVNC software, which is part of the monitoring, control, and remote maintenance module for the commercial cold production equipment TelevisGo, allows a intruder to execute arbitrary code.
The vulnerability of the UltraVNC software, which is part of the monitoring, control, and remote maintenance module for the commercial cold production equipment TelevisGo, relates to buffer overflow and out-of-buffer conditions. Exploiting this vulnerability allows a malicious actor operating...
CVE-2017-15329: Improper Neutralization of Special Elements used in an SQL Command
Huawei UMA V200R001C00 has a SQL injection vulnerability in the operation and maintenance module. An attacker logs in to the system as a common user and sends crafted HTTP requests that contain malicious SQL statements to the affected system. Due to a lack of input validation on HTTP requests tha...
Icon Time Systems RTC-1000 Firmware 2.5.7458 - Cross-Site Scripting
Exploit Title: Icon Time Systems RTC-1000 alert"xss"; ========================================================== PROOF OF CONCEPT - With valid credentials that has permissions to modify the employee records, access the employeelist.html page via Lists-Employees - Click on an active employee...
CVE-2016-8803
The maintenance module in Huawei FusionStorage V100R003C30U1 allows attackers to create documents according to special rules to obtain the OS root privilege of FusionStorage...
CVE-2016-8803
The maintenance module in Huawei FusionStorage V100R003C30U1 allows attackers to create documents according to special rules to obtain the OS root privilege of FusionStorage...
Privilege escalation
The maintenance module in Huawei FusionStorage V100R003C30U1 allows attackers to create documents according to special rules to obtain the OS root privilege of FusionStorage...
CVE-2016-8803
CVE-2016-8803 affects Huawei FusionStorage. The maintenance module in FusionStorage V100R003C30U1 allows a logged-in OS user to manipulate documents under specific rules to escalate to OS root privileges. Impact is privilege escalation with potential full control of the FusionStorage host; no exp...
CVE-2016-8803
The maintenance module in Huawei FusionStorage V100R003C30U1 allows attackers to create documents according to special rules to obtain the OS root privilege of FusionStorage...
CVE-2016-8803: Undefined Security Weakness
The maintenance module in Huawei FusionStorage V100R003C30U1 allows attackers to create documents according to special rules to obtain the OS root privilege of FusionStorage...
