CVE-2002-2445: Undefined Security Weakness

GE Healthcare Millennium MG, NC, and MyoSIGHT has a default password of 1 root.genie for the root user, 2 "service." for the service user, 3 admin.genie for the admin user, 4 reboot for the reboot user, and 5 shutdown for the shutdown user, which has unspecified impact and attack vectors...

PT-2015-3458

Name of the Vulnerable Software and Affected Versions GE Healthcare Millennium MG, NC, and MyoSIGHT affected versions not specified Description The issue concerns a hardcoded password for the insite account, which is set to insite.genieacq. This password cannot be changed without disabling certai...

mg-soft net inspector 6.5.0.828 Multiple Vulnerabilities

No description provided by source. Luigi Auriemma Application: MG-SOFT Net Inspector http://www.mg-soft.com/netinsp.html bug C affects any MgWTrap3 service which is included in almost all the MG-SOFT products like MIB Browser, Query Manager, Trap Ringer Pro and so on Versions: Net Inspector =...

CVE-2010-4791

SQL injection vulnerability in infusions/mguserfotoalbumpanel/mguserfotoalbum.php in the MG User-Fotoalbum mguserfotoalbumpanel module 1.0.1 for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the albumid parameter...

Sql injection

SQL injection vulnerability in infusions/mguserfotoalbumpanel/mguserfotoalbum.php in the MG User-Fotoalbum mguserfotoalbumpanel module 1.0.1 for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the albumid parameter...

CVE-2010-4791

The CVE-2010-4791 entry describes an SQL injection in MG User-Fotoalbum (mg_user_fotoalbum_panel) module 1.0.1 for PHP-Fusion, triggered via the album_id parameter in infusions/mg_user_fotoalbum_panel/mg_user_fotoalbum.php. The vulnerability allows remote attackers to execute arbitrary SQL comman...

CVE-2010-4791: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in infusions/mguserfotoalbumpanel/mguserfotoalbum.php in the MG User-Fotoalbum mguserfotoalbumpanel module 1.0.1 for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the albumid parameter...

PT-2011-1739

Name of the Vulnerable Software and Affected Versions MG User-Fotoalbum mg user fotoalbum panel module version 1.0.1 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the album id parameter in the infusions/mg user fotoalbum panel/mg user...

SQL injection vulnerability in Natychmiast CMS

Title: SQL injection vulnerability in Natychmiast CMS Date: 03.03.2010 Author: Ariko-Security Software Link: http://www.natychmiast-cms.pl/ Version: ALL ============ Ariko-Security - Advisory 2/3/2010 ============= SQL injection and XSS vulnerability in NATYCHMIAST CMS Vendor's Description of...

WebAdministrator Lite CMS - SQL Injection

WebAdministrator Lite CMS - SQL Injection ============ Ariko-Security - Advisory 5/2/2010 ============= SQL injection vulnerability in WebAdministrator Lite CMS Vendor's Description of Software: http://jskinternet.pl/portal/jsk/3/Oferta.html Dork: webadministrator lite Application Info: Name:...

SQL injection vulnerability in apemCMS

============ Ariko-Security - Advisory 1/2/2010 ============= SQL injection vulnerability in apemCMS Vendor's Description of Software: http://apem.com.pl/?sc=oferta Dork: Powered by apemCMS Application Info: Name: apemCMS Versions: ALL Vulnerability Info: Type: SQL injection Vulnerability Risk:...

apemCMS SQL Injection Vulnerability

No description provided by source. ============ Ariko-Security - Advisory 1/2/2010 ============= SQL injection vulnerability in apemCMS Vendor's Description of Software: http://apem.com.pl/?sc=oferta Dork: Powered by apemCMS Application Info: Name: apemCMS Versions: ALL Vulnerability Info: Type:...

apemCMS - SQL Injection

apemCMS - SQL Injection ============ Ariko-Security - Advisory 1/2/2010 ============= SQL injection vulnerability in apemCMS Vendor's Description of Software: http://apem.com.pl/?sc=oferta Dork: Powered by apemCMS Application Info: Name: apemCMS Versions: ALL Vulnerability Info: Type: SQL injecti...

apemCMS - SQL Injection

============ Ariko-Security - Advisory 1/2/2010 ============= SQL injection vulnerability in apemCMS Vendor's Description of Software: http://apem.com.pl/?sc=oferta Dork: Powered by apemCMS Application Info: Name: apemCMS Versions: ALL Vulnerability Info: Type: SQL injection Vulnerability Risk:...

PT-2010-2124 · Typo3 · Typo3 Helpdesk (Mg Help) Extension

Name of the Vulnerable Software and Affected Versions: TYPO3 Helpdesk mg help extension version 1.1.6 and earlier Description: A SQL injection issue allows remote attackers to execute arbitrary SQL commands. Recommendations: For versions 1.1.6 and earlier, update to a version later than 1.1.6 to...

Directory traversal

Directory traversal vulnerability in the Net Inspector HTTP Server mghttpd in MG-SOFT Net Inspector 6.5.0.828 and earlier for Windows allows remote attackers to read arbitrary files via a ".." dot dot backslash or "../" dot dot slash in the URI...

Format string

Format string vulnerability in the Net Inspector HTTP server mghttpd in MG-SOFT Net Inspector 6.5.0.828 and earlier for Windows allows remote attackers to execute arbitrary code via format string specifiers in the URI, which is recorded in a log file...

CVE-2008-1402

MG-SOFT Net Inspector 6.5.0.828 and earlier for Windows allows remote attackers to cause a 1 denial of service exception and crash via a UDP packet to the SNMP Trap Service MgWTrap3.exe or 2 denial of service device freeze or memory consumption via a malformed request to the Net Inspector Server...

CVE-2008-1401

Format string vulnerability in the Net Inspector HTTP server mghttpd in MG-SOFT Net Inspector 6.5.0.828 and earlier for Windows allows remote attackers to execute arbitrary code via format string specifiers in the URI, which is recorded in a log file...

CVE-2008-1402

CVE-2008-1402 affects MG-SOFT Net Inspector, specifically versions up to 6.5.0.828 on Windows. The vulnerability allows remote denial of service: (1) via a UDP packet to the SNMP Trap Service (MgWTrap3.exe) and (2) via a malformed request to the Net Inspector Server (niengine). The provided conne...