329 matches found
CVE-2014-4305
Multiple SQL injection vulnerabilities in NICE Recording eXpress aka Cybertech eXpress 6.5.7 and earlier allow remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2014-4308
Multiple cross-site scripting XSS vulnerabilities in NICE Recording eXpress aka Cybertech eXpress before 6.5.5 allow remote attackers to inject arbitrary web script or HTML via the 1 USRLNM parameter to myaccount/mysettings.edit.validate.asp or the frame parameter to 2...
CVE-2014-4305
NICE Recording eXpress (aka Cybertech eXpress) 6.5.7 and earlier contains multiple SQL injection vulnerabilities. The issues allow remote attackers to execute arbitrary SQL commands via unspecified vectors. Root cause is SQL injection in the affected application paths; explicit affected component...
CVE-2014-4308
NICE Recording eXpress (Cybertech eXpress) is affected prior to version 6.5.5 by multiple XSS vulnerabilities. The issues arise from input in the USRLNM parameter (myaccount/mysettings.edit.validate.asp) and several _ifr/ iframe.picker.* endpoints (statchannels, channelgroups, extensions, license...
CVE-2014-4305: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in NICE Recording eXpress aka Cybertech eXpress 6.5.7 and earlier allow remote attackers to execute arbitrary SQL commands via unspecified vectors...
PT-2014-5800
Name of the Vulnerable Software and Affected Versions NICE Recording eXpress aka Cybertech eXpress versions 6.5.7 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands, potentially leading to unauthorized data access or modification. The exact vectors used fo...
PT-2014-5803
Name of the Vulnerable Software and Affected Versions NICE Recording eXpress versions prior to 6.5.5 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the USRLNM parameter to "myaccount/mysettings.edit.validate.asp" or the frame paramet...
CVE-2014-4308: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in NICE Recording eXpress aka Cybertech eXpress before 6.5.5 allow remote attackers to inject arbitrary web script or HTML via the 1 USRLNM parameter to myaccount/mysettings.edit.validate.asp or the frame parameter to 2...
NICE Recording eXpress 6.x Root Backdoor / XSS / Bypass
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Root Backdoor & Unauthenticated access to voice recordings product: NICE Recording eXpress voice recording solution formerly...
NICE Recording eXpress multiple security vulnerabilities
Multiple security vulnerability, including privileged backdoor access...
SEC Consult SA-20140528-0 :: Root Backdoor & Unauthenticated access to voice recordings in NICE Recording eXpress
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SEC Consult Vulnerability Lab Security Advisory 20140528-0 ======================================================================= title: Root Backdoor & Unauthenticated access to voice recordings product: NICE Recording eXpress voice recording soluti...
2013 PCI SSC European Community Meeting Wrap-Up
Matt Getzleman - PCI Practice Director, Dan Fritsche - Director, Solution Validation, Andrew Barratt - Managing Director UK, and Brian Pennington - Regional Sales Director, discuss the recent PCI SSC Community Meeting in Nice, France...
Joomla Component com_niceajaxpoll <= 1.3.0 SQL Injection Vulnerability
Exploit for php platform in category web applications Title : Joomla comniceajaxpoll = 1.3.0 SQL Injection Vulnerability Author : Patrick de Brouwer - @knickz0r NLSecurity - www.nlsecurity.org Dork : inurl:"/index.php?option=comniceajaxpoll" Software : Joomla component Nice Ajax Poll = 1.3.0...
Joomla! Component com_niceajaxpoll 1.3.0 - SQL Injection
Title : Joomla comniceajaxpoll = 1.3.0 SQL Injection Vulnerability Author : Patrick de Brouwer - @knickz0r NLSecurity - www.nlsecurity.org Dork : inurl:"/index.php?option=comniceajaxpoll" Software : Joomla component Nice Ajax Poll = 1.3.0 http://dmitry.dn.ua/my-projects/304-nice-ajax-poll.html...
New 'Nice Pack' Exploit Kit Found, Thousands of Owned Sites Redirecting Users to Attack Site
A new exploit pack has appeared on the scene in the last week or so and it already is causing trouble for users, with thousands of compromised Web sites redirecting users to a page that is hosting the pack and exploiting vulnerabilities on their machines to install malware. The attackers behind t...
DEBIAN-CVE-2011-1176
The configuration merger in itk.c in the Steinar H. Gunderson mpm-itk Multi-Processing Module 2.2.11-01 and 2.2.11-02 for the Apache HTTP Server does not properly handle certain configuration sections that specify NiceValue but not AssignUserID, which might allow remote attackers to gain privileg...
Simple And Nice Index File 1.5.2 Arbitrary File Download
-------------------------------------------- -: Snif - "Any Filetype" Download Exploit :- -------------------------------------------- Script : Snif - Simple And Nice Index File Version : 1.5.2 possibly lower versions too Found By : Aodrulez. Email : f3arm3d3aratgmail.com Vulnerability:...
CVE-2008-6525
SQL injection vulnerability in the Admin Panel in Nice PHP FAQ Script Knowledge base Script allows remote attackers to execute arbitrary SQL commands via the Password parameter aka the pass field...
Sql injection
SQL injection vulnerability in the Admin Panel in Nice PHP FAQ Script Knowledge base Script allows remote attackers to execute arbitrary SQL commands via the Password parameter aka the pass field...