1220 matches found
Design/Logic Flaw
IBM WebSphere Partner Gateway WPG 6.0.0 through 6.0.0.7 does not properly handle failures of signature verification, which might allow remote authenticated users to submit a crafted RosettaNet aka RNIF document to a backend application, related to 1 "altered service content" and 2 "digital...
CVE-2009-0440
IBM WebSphere Partner Gateway WPG 6.0.0 through 6.0.0.7 does not properly handle failures of signature verification, which might allow remote authenticated users to submit a crafted RosettaNet aka RNIF document to a backend application, related to 1 "altered service content" and 2 "digital...
CVE-2009-0440
IBM WebSphere Partner Gateway (WPG) 6.0.0–6.0.0.7 is affected by a flaw where failures in signature verification are not handled properly. This could allow remote authenticated users to submit a crafted RosettaNet (RNIF) document to a backend application,涉及 (1) altered service content and (2) dig...
CVE-2009-0440
IBM WebSphere Partner Gateway WPG 6.0.0 through 6.0.0.7 does not properly handle failures of signature verification, which might allow remote authenticated users to submit a crafted RosettaNet aka RNIF document to a backend application, related to 1 "altered service content" and 2 "digital...
CVE-2009-0440: Improper Authentication
IBM WebSphere Partner Gateway WPG 6.0.0 through 6.0.0.7 does not properly handle failures of signature verification, which might allow remote authenticated users to submit a crafted RosettaNet aka RNIF document to a backend application, related to 1 "altered service content" and 2 "digital...
Unfixed XSS vulnerability at www.sbab.se
Security researcher anon2k, has submitted on 21/02/2009 a cross-site-scripting XSS vulnerability affecting www.sbab.se, which at the time of submission ranked 79751 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/07/2009. It is currently...
w3bcms 3.5.0 SQL Injection
!/usr/bin/perl use LWP::UserAgent; use HTTP::Request::Common qwPOST; use Getopt::Long; '/ -.- -------------------oOO------OOo------------------ | | | / / / / | | / / / / / / / / / / / | | // // / / / // / // / // | | ///,// /./,/, // | | Security Research Division // 2oo9 |...
rankem-sqlbypass.txt
-----------------------------OffensiveTrack------------------------------ ---------------------------- Tunisia Muslim ------------------------------ found by : OffensiveTrack Author : AlpHaNiX website : www.offensivetrack.org contact : AlpHaATHACKERDOTBZ script : RankEm download :...
RankEm (auth bypass) Remote SQL Injection Vulnerability
No description provided by source. -----------------------------OffensiveTrack------------------------------ ---------------------------- Tunisia Muslim ------------------------------ found by : OffensiveTrack Author : AlpHaNiX website : www.offensivetrack.org contact : AlpHaATHACKERDOTBZ script ...
CVE-2007-3793
JP1/NETM/DM Manager for Windows is affected by a SQL injection vulnerability (CVE-2007-3793) described in the JVN entry: arbitrary SQL commands could be executed or the database could be corrupted when handling malformed requests. The vulnerability concerns the JP1/NETM/DM Manager’s interaction w...
CVE-2007-3793
SQL injection vulnerability in Job Management Partner 1/NETM/DM JP1/NETM/DM Manager on Windows before 20070413 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2007-3793: Undefined Security Weakness
SQL injection vulnerability in Job Management Partner 1/NETM/DM JP1/NETM/DM Manager on Windows before 20070413 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
Unfixed XSS vulnerability at www.smilebox.com
Security researcher MaXWeL, has submitted on 19/05/2007 a cross-site-scripting XSS vulnerability affecting www.smilebox.com, which at the time of submission ranked 30870 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/05/2007. It is currentl...
Unfixed XSS vulnerability at nw.afnet.jp
Security researcher kusomiso.com, has submitted on 05/10/2007 a cross-site-scripting XSS vulnerability affecting nw.afnet.jp, which at the time of submission ranked 244896 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/10/2007. It is...
Remote file inclusion
PHP remote file inclusion vulnerability in inc/functionsinc.php in VS-Link-Partner 2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the gbpfad, or possibly scriptpfad, parameter...
CVE-2007-1025
PHP remote file inclusion vulnerability in inc/functionsinc.php in VS-Link-Partner 2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the gbpfad, or possibly scriptpfad, parameter...
CVE-2007-1025
CVE-2007-1025 is a PHP remote file inclusion vulnerability in the file set of VS-Link-Partner 2.1 and earlier . The issue is in inc/functions_inc.php and allows an attacker to supply a URL via the gb_pfad (or possibly script_pfad ) parameter to execute arbitrary PHP code on the affected system. T...
CVE-2007-1025: Undefined Security Weakness
PHP remote file inclusion vulnerability in inc/functionsinc.php in VS-Link-Partner 2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the gbpfad, or possibly scriptpfad, parameter...
VS-Link-Partner <= 2.1 (script_pfad) Remote File Include Exploit
No description provided by source. VS-Link-Partner //'=============================================================================================== //'Script Name: VS-Link-Partner //'.... //'.. //'ERROR--------------------------------------------------------- // ajann,Turkey // ... //Basic...
VS-Link-Partner 2.1 - 'script_pfad' Remote File Inclusion
VS-Link-Partner //'=============================================================================================== //'Script Name: VS-Link-Partner //'.... //'.. //'ERROR--------------------------------------------------------- // ajann,Turkey // ... //Basic exploit,but any time : var path="/inc/"...