Mapbender 2.4.4 (gaz) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================== Mapbender 2.4.4 gaz Remote SQL Injection Vulnerability ======================================================== Advisory: SQL-Injections in Mapbender During a penetration test RedTea...

Mapbender 2.4.4 (gaz) Remote SQL Injection Vulnerability

No description provided by source. Advisory: SQL-Injections in Mapbender During a penetration test RedTeam Pentesting discovered multiple SQL-Injections in Mapbender. A remote attacker is able to execute arbitrary SQL commands and therefore can get e.g. valid usernames and password hashes of the...

[Full-disclosure] Advisory: Remote Command Execution in Mapbender

Advisory: Remote Command Execution in Mapbender During a penetration test RedTeam Pentesting discovered a remote command execution vulnerability in Mapbender. An unauthorized user can create arbitrary PHP-files on the Mapbender webserver, which can later be executed. Details ======= Product:...

Mapbender 2.4.4 - 'mapFiler.php' Remote Code Execution

Advisory: Remote Command Execution in Mapbender During a penetration test RedTeam Pentesting discovered a remote command execution vulnerability in Mapbender. An unauthorized user can create arbitrary PHP-files on the Mapbender webserver, which can later be executed. Details ======= Product:...