EUVD-2007-2424

Malware in sbrugna...

[scip-Advisory 4063] PasswordManager Pro 6.1 Script Injection Vulnerability

PasswordManager Pro 6.1 Script Injection Vulnerability scip AG Vulnerability ID 4063 12/15/2009 http://www.scip.ch/?vuldb.4063 I. INTRODUCTION "Password Manager Pro is a secure vault for storing and managing shared sensitive information such as passwords, documents and digital identities of...

Information disclosure

ManageEngine PasswordManager Pro PMP allows remote attackers to obtain administrative access to a database by injecting a certain command line for the mysql program, as demonstrated by the "-port 2345" and "-u root" arguments. NOTE: the provenance of this information is unknown; the details are...