CVE-2009-2093

SQL injection vulnerability in the console in IBM WebSphere Partner Gateway WPG Enterprise 6.0 before FP8, 6.1 before FP3, 6.1.1 before FP2, and 6.2 before FP1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the console in IBM WebSphere Partner Gateway WPG Enterprise 6.0 before FP8, 6.1 before FP3, 6.1.1 before FP2, and 6.2 before FP1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2009-2093

CVE-2009-2093 affects IBM WebSphere Partner Gateway (WPG) Enterprise versions 6.0 (before FP8), 6.1 (before FP3), 6.1.1 (before FP2), and 6.2 (before FP1). The issue is a SQL injection in the console that allows remote authenticated users to execute arbitrary SQL commands through unspecified vect...

CVE-2009-0897

IBM WebSphere Partner Gateway WPG 6.1.0 before 6.1.0.1 and 6.1.1 before 6.1.1.1 allows remote authenticated users to obtain sensitive information via vectors related to the "schema DB2 instance id" and the bcgarchive aka the archiver script...

Information disclosure

IBM WebSphere Partner Gateway WPG 6.1.0 before 6.1.0.1 and 6.1.1 before 6.1.1.1 allows remote authenticated users to obtain sensitive information via vectors related to the "schema DB2 instance id" and the bcgarchive aka the archiver script...

CVE-2009-0897

IBM WebSphere Partner Gateway WPG 6.1.0 before 6.1.0.1 and 6.1.1 before 6.1.1.1 allows remote authenticated users to obtain sensitive information via vectors related to the "schema DB2 instance id" and the bcgarchive aka the archiver script...

CVE-2009-0897

The CVE-2009-0897 pertains to IBM WebSphere Partner Gateway (WPG) versions 6.1.0 prior to 6.1.0.1 and 6.1.1 prior to 6.1.1.1. It enables remote authenticated users to disclose sensitive information via vectors related to the schema DB2 instance id and the bcgarchive (archiver script). Affected co...

IBM WebSphere Partner Gateway RNIF文档绕过安全限制漏洞

BUGTRAQ ID: 33839 CVECAN ID: CVE-2009-0440 WebSphere Partner Gateway是一个轻量级、易于使用、经济高效的B2B连接工具。 WebSphere Partner Gateway没有正确地处理签名验证失败，通过认证的远程攻击者可以绕过签名验证向后端应用提交恶意的RNIF文档。 IBM WebSphere Partner Gateway 6.0.0 - 6.0.0.7 厂商补丁： IBM --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CVE-2009-0440

IBM WebSphere Partner Gateway WPG 6.0.0 through 6.0.0.7 does not properly handle failures of signature verification, which might allow remote authenticated users to submit a crafted RosettaNet aka RNIF document to a backend application, related to 1 "altered service content" and 2 "digital...

Design/Logic Flaw

IBM WebSphere Partner Gateway WPG 6.0.0 through 6.0.0.7 does not properly handle failures of signature verification, which might allow remote authenticated users to submit a crafted RosettaNet aka RNIF document to a backend application, related to 1 "altered service content" and 2 "digital...

CVE-2009-0440

IBM WebSphere Partner Gateway WPG 6.0.0 through 6.0.0.7 does not properly handle failures of signature verification, which might allow remote authenticated users to submit a crafted RosettaNet aka RNIF document to a backend application, related to 1 "altered service content" and 2 "digital...

CVE-2009-0440

IBM WebSphere Partner Gateway (WPG) 6.0.0–6.0.0.7 is affected by a flaw where failures in signature verification are not handled properly. This could allow remote authenticated users to submit a crafted RosettaNet (RNIF) document to a backend application,涉及 (1) altered service content and (2) dig...

Unfixed XSS vulnerability at www.sbab.se

Security researcher anon2k, has submitted on 21/02/2009 a cross-site-scripting XSS vulnerability affecting www.sbab.se, which at the time of submission ranked 79751 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/07/2009. It is currently...

w3bcms 3.5.0 SQL Injection

!/usr/bin/perl use LWP::UserAgent; use HTTP::Request::Common qwPOST; use Getopt::Long; '/ -.- -------------------oOO------OOo------------------ | | | / / / / | | / / / / / / / / / / / | | // // / / / // / // / // | | ///,// /./,/, // | | Security Research Division // 2oo9 |...

rankem-sqlbypass.txt

-----------------------------OffensiveTrack------------------------------ ---------------------------- Tunisia Muslim ------------------------------ found by : OffensiveTrack Author : AlpHaNiX website : www.offensivetrack.org contact : AlpHaATHACKERDOTBZ script : RankEm download :...

RankEm (auth bypass) Remote SQL Injection Vulnerability

No description provided by source. -----------------------------OffensiveTrack------------------------------ ---------------------------- Tunisia Muslim ------------------------------ found by : OffensiveTrack Author : AlpHaNiX website : www.offensivetrack.org contact : AlpHaATHACKERDOTBZ script ...

CVE-2007-3793

JP1/NETM/DM Manager for Windows is affected by a SQL injection vulnerability (CVE-2007-3793) described in the JVN entry: arbitrary SQL commands could be executed or the database could be corrupted when handling malformed requests. The vulnerability concerns the JP1/NETM/DM Manager’s interaction w...

CVE-2007-3793

SQL injection vulnerability in Job Management Partner 1/NETM/DM JP1/NETM/DM Manager on Windows before 20070413 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Unfixed XSS vulnerability at www.smilebox.com

Security researcher MaXWeL, has submitted on 19/05/2007 a cross-site-scripting XSS vulnerability affecting www.smilebox.com, which at the time of submission ranked 30870 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/05/2007. It is currentl...

Unfixed XSS vulnerability at nw.afnet.jp

Security researcher kusomiso.com, has submitted on 05/10/2007 a cross-site-scripting XSS vulnerability affecting nw.afnet.jp, which at the time of submission ranked 244896 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/10/2007. It is...