Trust Management Vulnerabilities in Multiple GE Products (CNVD-2015-05132)

GE Healthcare Millennium MG, NC and MyoSIGHT are General Electric GE scanning camera products for the healthcare industry. A security vulnerability exists in multiple GE products that stems from the use of 'insite.genieacq' which cannot be changed unless the program disables remote InSite-support...

CVE-2002-2446

GE Healthcare Millennium MG, NC, and MyoSIGHT has a password of insite.genieacq for the insite account that cannot be changed without disabling product functionality for remote InSite support, which has unspecified impact and attack vectors...

CVE-2002-2445

GE Healthcare Millennium MG, NC, and MyoSIGHT has a default password of 1 root.genie for the root user, 2 "service." for the service user, 3 admin.genie for the admin user, 4 reboot for the reboot user, and 5 shutdown for the shutdown user, which has unspecified impact and attack vectors...

CVE-2002-2446

The CVE-2002-2446 issue affects GE Healthcare Millennium MG / NC / MyoSIGHT (and related GE imaging systems) due to default or hard-coded credentials: the insite.genieacq password cannot be changed without disabling remote InSite support. This enables potential remote authentication bypass on aff...

CVE-2002-2445

CVE-2002-2445 affects GE Healthcare Millennium MG, NC, and MyoSIGHT. The vulnerability stems from the use of default passwords for multiple accounts (root.genie, service., admin.genie, reboot, shutdown). According to connected CNVD-2015-05133, an attacker could exploit these defaults to take cont...

mg-soft net inspector 6.5.0.828 Multiple Vulnerabilities

No description provided by source. Luigi Auriemma Application: MG-SOFT Net Inspector http://www.mg-soft.com/netinsp.html bug C affects any MgWTrap3 service which is included in almost all the MG-SOFT products like MIB Browser, Query Manager, Trap Ringer Pro and so on Versions: Net Inspector =...

CVE-2010-4791

SQL injection vulnerability in infusions/mguserfotoalbumpanel/mguserfotoalbum.php in the MG User-Fotoalbum mguserfotoalbumpanel module 1.0.1 for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the albumid parameter...

Sql injection

SQL injection vulnerability in infusions/mguserfotoalbumpanel/mguserfotoalbum.php in the MG User-Fotoalbum mguserfotoalbumpanel module 1.0.1 for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the albumid parameter...

CVE-2010-4791

The CVE-2010-4791 entry describes an SQL injection in MG User-Fotoalbum (mg_user_fotoalbum_panel) module 1.0.1 for PHP-Fusion, triggered via the album_id parameter in infusions/mg_user_fotoalbum_panel/mg_user_fotoalbum.php. The vulnerability allows remote attackers to execute arbitrary SQL comman...

SQL injection vulnerability in Natychmiast CMS

Title: SQL injection vulnerability in Natychmiast CMS Date: 03.03.2010 Author: Ariko-Security Software Link: http://www.natychmiast-cms.pl/ Version: ALL ============ Ariko-Security - Advisory 2/3/2010 ============= SQL injection and XSS vulnerability in NATYCHMIAST CMS Vendor's Description of...

WebAdministrator Lite CMS - SQL Injection

WebAdministrator Lite CMS - SQL Injection ============ Ariko-Security - Advisory 5/2/2010 ============= SQL injection vulnerability in WebAdministrator Lite CMS Vendor's Description of Software: http://jskinternet.pl/portal/jsk/3/Oferta.html Dork: webadministrator lite Application Info: Name:...

apemCMS SQL Injection Vulnerability

No description provided by source. ============ Ariko-Security - Advisory 1/2/2010 ============= SQL injection vulnerability in apemCMS Vendor's Description of Software: http://apem.com.pl/?sc=oferta Dork: Powered by apemCMS Application Info: Name: apemCMS Versions: ALL Vulnerability Info: Type:...

SQL injection vulnerability in apemCMS

============ Ariko-Security - Advisory 1/2/2010 ============= SQL injection vulnerability in apemCMS Vendor's Description of Software: http://apem.com.pl/?sc=oferta Dork: Powered by apemCMS Application Info: Name: apemCMS Versions: ALL Vulnerability Info: Type: SQL injection Vulnerability Risk:...

apemCMS - SQL Injection

apemCMS - SQL Injection ============ Ariko-Security - Advisory 1/2/2010 ============= SQL injection vulnerability in apemCMS Vendor's Description of Software: http://apem.com.pl/?sc=oferta Dork: Powered by apemCMS Application Info: Name: apemCMS Versions: ALL Vulnerability Info: Type: SQL injecti...

apemCMS - SQL Injection

============ Ariko-Security - Advisory 1/2/2010 ============= SQL injection vulnerability in apemCMS Vendor's Description of Software: http://apem.com.pl/?sc=oferta Dork: Powered by apemCMS Application Info: Name: apemCMS Versions: ALL Vulnerability Info: Type: SQL injection Vulnerability Risk:...

PT-2010-2124 · Typo3 · Typo3 Helpdesk (Mg Help) Extension

Name of the Vulnerable Software and Affected Versions: TYPO3 Helpdesk mg help extension version 1.1.6 and earlier Description: A SQL injection issue allows remote attackers to execute arbitrary SQL commands. Recommendations: For versions 1.1.6 and earlier, update to a version later than 1.1.6 to...

Format string

Format string vulnerability in the Net Inspector HTTP server mghttpd in MG-SOFT Net Inspector 6.5.0.828 and earlier for Windows allows remote attackers to execute arbitrary code via format string specifiers in the URI, which is recorded in a log file...

Directory traversal

Directory traversal vulnerability in the Net Inspector HTTP Server mghttpd in MG-SOFT Net Inspector 6.5.0.828 and earlier for Windows allows remote attackers to read arbitrary files via a ".." dot dot backslash or "../" dot dot slash in the URI...

CVE-2008-1402

MG-SOFT Net Inspector 6.5.0.828 and earlier for Windows allows remote attackers to cause a 1 denial of service exception and crash via a UDP packet to the SNMP Trap Service MgWTrap3.exe or 2 denial of service device freeze or memory consumption via a malformed request to the Net Inspector Server...

CVE-2008-1402

CVE-2008-1402 affects MG-SOFT Net Inspector, specifically versions up to 6.5.0.828 on Windows. The vulnerability allows remote denial of service: (1) via a UDP packet to the SNMP Trap Service (MgWTrap3.exe) and (2) via a malformed request to the Net Inspector Server (niengine). The provided conne...