Collabtive 1.2 - SQL Injection

Collabtive 1.2 - SQL Injection Vulnerability title: SQL Injection / SQL Error message in Collabtive application CVE-2014-3246 CVE: CVE-2014-3246 cordinated with Vendor: Collabtive Product: Collabtive Open Source Project Management Software Affected version: 1.12 Fixed version: 2.0 Reported by:...

Hoteldruid (PHP-residence) v1.X.X (SQLi/LFI) Multiple Vulenrabilities

Exploit for php platform in category web applications + Author: TUNISIAN CYBER + Exploit Title: Hoteldruid PHP-residence v1.X.X SQLi/LFI Multiple Vulenrabilities + Date: 14-12-2013 + Category: WebApp + Vendor: http://www.hoteldruid.com/en/download.html + Google Dork: inurl:"mostrasorgente.php" +...

[ISecAuditors Security Advisories] SQL Injection vulnerability in "Project'Or RIA" allow arbitrary access to the database and the file system

============================================= INTERNET SECURITY AUDITORS ALERT 2013-017 - Original release date: July 26th, 2013 - Last revised: July 26th, 2013 - Discovered by: Vicente Aguilera Diaz - Severity: 6.8/10 CVSSv2 Base Scored - CVE-ID: CVE-2013-6164...

ProjectOr RIA 3.4.0 - objectDetail.php?objectId SQL Injection

ProjectOr RIA 3.4.0 - objectDetail.php?objectId SQL Injection ============================================= INTERNET SECURITY AUDITORS ALERT 2013-017 - Original release date: July 26th, 2013 - Last revised: July 26th, 2013 - Discovered by: Vicente Aguilera Diaz - Severity: 6.8/10 CVSSv2 Base Scor...

Project'Or RIA 3.4.0 Cross Site Scripting

============================================= INTERNET SECURITY AUDITORS ALERT 2013-018 - Original release date: July 26th, 2013 - Last revised: July 26th, 2013 - Discovered by: Vicente Aguilera Diaz - Severity: 4.3/10 CVSSv2 Base Scored - CVE-ID: CVE-2013-6163...

Code injection

Unspecified vulnerability in HP Intelligent Management Center iMC and HP IMC Service Operation Management Software Module allows remote attackers to obtain sensitive information via unknown vectors, aka ZDI-CAN-1647...

CVE-2013-4825

Unspecified vulnerability in HP Intelligent Management Center iMC and HP IMC Service Operation Management Software Module allows remote attackers to bypass intended access restrictions via unknown vectors, aka ZDI-CAN-1645...

PT-2013-5222

Name of the Vulnerable Software and Affected Versions HP Intelligent Management Center iMC affected versions not specified HP IMC Service Operation Management Software Module affected versions not specified Description The issue allows remote attackers to bypass authentication. The estimated numb...

PT-2013-5224

Name of the Vulnerable Software and Affected Versions HP Intelligent Management Center iMC affected versions not specified HP IMC Service Operation Management Software Module affected versions not specified Description The issue allows remote attackers to obtain sensitive information. The estimat...

CVE-2013-4824: Improper Authentication

Unspecified vulnerability in HP Intelligent Management Center iMC and HP IMC Service Operation Management Software Module allows remote attackers to bypass authentication via unknown vectors, aka ZDI-CAN-1644...

PT-2013-5225

Name of the Vulnerable Software and Affected Versions HP Intelligent Management Center iMC versions affected versions not specified HP IMC Service Operation Management Software Module versions affected versions not specified Description A SQL injection issue allows remote attackers to execute...

CVE-2013-4825: Undefined Security Weakness

Unspecified vulnerability in HP Intelligent Management Center iMC and HP IMC Service Operation Management Software Module allows remote attackers to bypass intended access restrictions via unknown vectors, aka ZDI-CAN-1645...

CVE-2013-4827: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in HP Intelligent Management Center iMC and HP IMC Service Operation Management Software Module allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka ZDI-CAN-1664...

CVE-2013-4826: Exposure of Sensitive Information to an Unauthorized Actor

Unspecified vulnerability in HP Intelligent Management Center iMC and HP IMC Service Operation Management Software Module allows remote attackers to obtain sensitive information via unknown vectors, aka ZDI-CAN-1647...

PT-2013-5223

Name of the Vulnerable Software and Affected Versions HP Intelligent Management Center iMC affected versions not specified HP IMC Service Operation Management Software Module affected versions not specified Description The issue allows remote attackers to bypass intended access restrictions. It i...

[security bulletin] HPSBGN02930 rev.1 - HP Intelligent Management Center(iMC) and HP IMC Service Operation Management Software Module, Remote Authentication Bypass, Disclosure of Information, Unauthorized Access, SQL Injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03943547 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03943547 Version: 1 HPSBGN02930 rev....

CVE-2013-4697

Multiple unspecified vulnerabilities in Hitachi JP1/IT Desktop Management - Manager 09-50 through 09-50-03, 09-51 through 09-51-05, 10-00 through 10-00-02, and 10-01 through 10-01-02; Hitachi Job Management Partner 1/IT Desktop Management - Manager 09-50 through 09-50-03 and 10-01; and Hitachi IT...

SynConnect PMS - SQL Injection Vulnerability

Exploit for php platform in category web applications Synchroweb Technology is a provider of application software, hardware and other innovative enterprise technology. They strive in development, deployment, and management of Linux and open source solutions for Internet infrastructure ranging fro...

SynConnect Pms - index.php?loginid SQL Injection

SynConnect Pms - index.php?loginid SQL Injection Title: ==== SynConnect - SQL Injection vulnerability Credit: ====== Name: Bhadresh Patel Company/affiliation: Cyberoam Technologies Private Limited Website: www.cyberoam.com CVE: ===== Date: ==== 01-03-2013 CRD: ==== CRD-2013-01 Vendor: ======...

Calendar Scripts A.M.Y 1.4 Cross Site Scripting

Advisory:Calendar Scripts A.M.Y. Ad Management Software 1.4 Persistent XSS Vulnerability Version:1.4 Vendor URL: http://calendarscripts.info/ Demo Link:http://demo.pimteam.net/amy/admin.php Author: Viknesvaran Sittaramane Category: Webapp Twiiter: https://twitter.com/csvsn ........... Product...