49 matches found
CVE-2016-11004
The Elegant Themes Monarch plugin before 1.2.7 for WordPress has privilege escalation...
Privilege escalation
The Elegant Themes Monarch plugin before 1.2.7 for WordPress has privilege escalation...
CVE-2016-11004
The CVE-2016-11004 entry concerns the WordPress plugin Elegant Themes Monarch (before version 1.2.7) with a privilege escalation flaw. Affected software is the Monarch plugin for WordPress; root cause details are not provided in the available documents beyond the privilege escalation classificati...
CVE-2016-11004
The Elegant Themes Monarch plugin before 1.2.7 for WordPress has privilege escalation...
Information Leakage Vulnerability in Monarch LinkWorks Collaboration Platform
Ltd. is a digital construction platform service provider based on "end+cloud+big data" products/services, providing value-added services such as industrial big data and industrial new finance. An information leakage vulnerability exists in the Dream Dragon LinkWorks collaboration platform. An...
jobs.monarchstaffing.com XSS vulnerability
Vulnerable URL: http://jobs.monarchstaffing.com/index.smpl?arg="%3E%3Csvg/onload=alert'OPENBUGBOUNTY'%3E// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated V...
WordPress Monarch Plugin <= 1.2.6 - Privilege Escalation
This plugin is prone to a privilege escalation vulnerability. Solution Update the plugin...
CVE-2013-3502
monarchscan.cgi in the MONARCH component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to execute arbitrary commands, and consequently obtain sensitive information, by leveraging a JOSSO SSO cookie...
CVE-2013-3503
The Profile Importer feature in monarch.cgi in the MONARCH component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External...
CVE-2013-3504
Directory traversal vulnerability in monarch.cgi in the MONARCH component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to overwrite arbitrary files by leveraging access to the nagios account...
Directory traversal
Directory traversal vulnerability in monarch.cgi in the MONARCH component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to overwrite arbitrary files by leveraging access to the nagios account...
Command injection
monarchscan.cgi in the MONARCH component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to execute arbitrary commands, and consequently obtain sensitive information, by leveraging a JOSSO SSO cookie...
Xxe
The Profile Importer feature in monarch.cgi in the MONARCH component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External...
CVE-2013-3504
Directory traversal vulnerability in monarch.cgi in the MONARCH component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to overwrite arbitrary files by leveraging access to the nagios account...
CVE-2013-3503
The Profile Importer feature in monarch.cgi in the MONARCH component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External...
CVE-2013-3504
The CVE-2013-3504 entry concerns GroundWork Monitor Enterprise 6.7.0, specifically the MONARCH component’s monarch.cgi, where a directory traversal vulnerability allows remote authenticated users (via the nagios account) to overwrite arbitrary files. The provided connected documents confirm the a...
DataWatch Monarch Business Intelligence (BI) v5.1 client section stored cross-site scripting
DataWatch Monarch BI v5.1 client section stored cross-site scripting Class: Input Validation Error Remote: Yes Local: No Published: 26/06/2012 Credit: Raymond Rizk of Dionach Limited [email protected] Vulnerable: DataWatch Monarch BI v5.1 DataWatch's Monarch BI client section is prone to a stored...
DataWatch Monarch Business Intelligence (BI) v5.1 admin section stored cross-site scripting
DataWatch Monarch BI v5.1 admin section stored cross-site scripting Class: Input Validation Error Remote: Yes Local: No Published: 26/06/2012 Credit: Raymond Rizk of Dionach Limited [email protected] Vulnerable: DataWatch Monarch BI v5.1 DataWatch's Monarch BI admin section is prone to a stored...
DataWatch Monarch BI multiple security vulnerabilities
Crossite scripting, SQL injection in administration interface...
DataWatch Monarch Business Intelligence (BI) v5.1 Blind SQL injection
DataWatch Monarch BI v5.1 admin section blind SQL injection Class: Input Validation Error Remote: Yes Local: No Published: 26/06/2012 Credit: Raymond Rizk of Dionach Limited [email protected] Vulnerable: DataWatch Monarch BI v5.1 DataWatch's Monarch BI client section is prone to a blind SQL...