199 matches found
CVE-2012-3347
CVE-2012-3347 affects AutoFORM PDM Archive prior to 7.0. The issue arises from how user accounts are implemented, allowing authenticated remote users to access the JMX Console at /jmx-console and then upload/execute arbitrary JSP code via a JBoss remote-deployment mechanism. The description docum...
CVE-2012-3347
AutoFORM PDM Archive before 7.0 implements user accounts in a way that allows for JMX Console authentication, which allows remote authenticated users to bypass intended access restrictions via the /jmx-console URI, and then upload and execute arbitrary JSP code via a JBoss remote-deployment...
CVE-2012-1828: Undefined Security Weakness
The administrative functions in AutoFORM PDM Archive before 7.1 do not have authorization requirements, which allows remote authenticated users to perform administrative actions by leveraging knowledge of a hidden function, as demonstrated by the password-change function...
CVE-2012-1829: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in AutoFORM PDM Archive before 6.920 allow remote authenticated users to inject arbitrary web script or HTML via unspecified fields...
CVE-2012-3347: Undefined Security Weakness
AutoFORM PDM Archive before 7.0 implements user accounts in a way that allows for JMX Console authentication, which allows remote authenticated users to bypass intended access restrictions via the /jmx-console URI, and then upload and execute arbitrary JSP code via a JBoss remote-deployment...
CVE-2012-1827: Undefined Security Weakness
The web service in AutoFORM PDM Archive before 7.1 does not have authorization requirements, which allows remote authenticated users to perform database operations via a SOAP request, as demonstrated by the initializeQueryDatabase2 request...
PT-2012-4658
Name of the Vulnerable Software and Affected Versions AutoFORM PDM Archive versions prior to 7.0 Description The issue allows remote authenticated users to bypass intended access restrictions via the "/jmx-console" API endpoint, and then upload and execute arbitrary JSP code via a JBoss...
PT-2012-3573
Name of the Vulnerable Software and Affected Versions AutoFORM PDM Archive versions prior to 7.1 Description The issue concerns the lack of authorization requirements for administrative functions, allowing remote authenticated users to perform administrative actions. This can be achieved by...
PT-2012-3574
Name of the Vulnerable Software and Affected Versions AutoFORM PDM Archive versions prior to 6.920 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote authenticated users to inject arbitrary web script or HTML via unspecified fields...
PT-2012-3572
Name of the Vulnerable Software and Affected Versions AutoFORM PDM Archive versions prior to 7.1 Description The issue concerns a lack of authorization requirements in the web service of the affected software. This allows remote authenticated users to perform database operations via a SOAP reques...
Gatesoft Docusafe Sql Injection Vulnerablity
Exploit for asp platform in category web applications ============================================ Gatesoft Docusafe Sql Injection Vulnerablity ============================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 3 3 3 3 7 /' \ /'\ /'\ /\ \ /\ /\ ...
Gatesafe Docusafe 4.1.0 SQL Injection
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 3 3 3 3 7 /' \ /'\ /'\ /\ \ /\ /\ \ 7 1 /, /\L\ \ /\L\ \///'/' \ \ \ \ 1 3 //\ //\ Exploit database separated by exploit 3 3 type local, remote, DoS, etc. 3 7 7 1 + Site : 1337db.com 1 3 + Support e-mail :...
Gatesoft Docusafe 4.1.0 - SQL Injection
Gatesoft Docusafe 4.1.0 - SQL Injection Author: R4dc0re Exploit Title: Gatesoft Docusafe Sql Injection Vulnerablity Date: 05-12-2010 Vendor or Software Link:http://gatesoft.no/ Category:WebApp Version:4.1.0 Price:3500$ Contact: [email protected] Website: www.1337db.com Greetings to:...
Gatesoft Docusafe 4.1.0 - SQL Injection
Author: R4dc0re Exploit Title: Gatesoft Docusafe Sql Injection Vulnerablity Date: 05-12-2010 Vendor or Software Link:http://gatesoft.no/ Category:WebApp Version:4.1.0 Price:3500$ Contact: [email protected] Website: www.1337db.com Greetings to: R0073r1337db.com, L0rd CrusAd3r,Sid3^effects and to re...
CVE-2009-2375
Stack-based buffer overflow in Photo DVD Maker 8.02, and possibly earlier versions, allows remote attackers to execute arbitrary code via a long FileName parameter in a .pdm file. NOTE: some of these details are obtained from third party information...
CVE-2009-2375: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in Photo DVD Maker 8.02, and possibly earlier versions, allows remote attackers to execute arbitrary code via a long FileName parameter in a .pdm file. NOTE: some of these details are obtained from third party information...
Photo DVD Maker buffer overflow
Buffer overflow on .PDM files parsing...
[Bkis-10-2009] Photo DVD Maker Professional Buffer Overflow Vulnerability
Title : Photo DVD Maker Professional Buffer Overflow Vulnerability 1. General Information Photo DVD Maker Professional is a tool allows you to create entertaining photo slideshows with many file formats supported. Bkis has just detected a vulnerability in the software related to the processing of...
