PT-2013-15: XML External Entities Injection in vBulletin 5 Connect

The specialists of the Positive Research center have detected an XML External Entities Injection vulnerability in vBulletin 5 Connect. The vulnerability was detected in "appendersocketserver.php" of the Apache log4php library used by vBulletin. PHP's built-in SoapClient class allows the use of...

PT-2013-12: open_basedir bypass in PHP

The specialists of Positive Technologies have detected bypass of the configuration directive "openbasedir" in PHP. The vulnerability was detected in the PHP's built-in SoapClient class. PHP does not validate the configration directive "soap.wsdlcachedir" before writing SOAP wsdl cache files to th...

PT-2013-06: Current User Context Access in Oracle Siebel CRM

The specialists of the Positive Research center have detected a Current User Context Access vulnerability in Oracle Siebel CRM. An attacker is able to access the system and operate in the name of aby user. The attacker can get context bruteforcing certain cookie values. All systems with hard-code...

PT-2013-08: Remote OS Command Execution in Oracle Siebel CRM

The specialists of the Positive Research center have detected a Remote OS Command Execution vulnerability in Oracle Siebel CRM. An attacker is able to execute arbitrary commands on the target system with current user's privileges and also access its file system using eScript embedded tools. How t...

PT-2013-07: Path and Version Disclosure in Oracle Siebel CRM

The specialists of the Positive Research center have detected a Path and Version Disclosure vulnerability in Oracle Siebel CRM. An attacker is able to disclose software path and version if he imports an invalid XML file. How to fix Update your software up to the latest version Advisory status...

DataLife Engine 9.7 Session Fixation

----------------------------------------------------------- PT-2012-53 Positive Technologies Security Advisory Privilege Gaining in DataLife Engine ----------------------------------------------------------- --- Vulnerable software DataLife Engine Version: 9.7 and earlier Application link:...

PT-2013-11: XML External Entities Injection in Oracle Siebel CRM

The specialists of the Positive Research center have detected an XML External Entities Injection vulnerability in Oracle Siebel CRM. The vulnerability is possible during import of XML files in CRM Siebel. An attacker is able to read an arbitrary file on the target system. How to fix Update your...

PT-2013-19: XML External Entities Resolution vulnerability in HP ArcSight Connector

The specialists of the Positive Research center have detected an XML External Entities Resolution vulnerability in HP ArcSight Connector. An attacker is able to import a specially crafted XML file, which would force ArcSight Connector to disclose local or remote resources to a malicious server on...

PT-2013-01: XML External Entity Injection in GNOME

Positive Research Center experts have detected a local resources access vulnerability files and internal network resources via XML External Entity enabled in GNOME. An attacker is able to give a user a specially crafted file. If he or she views a folder with the file or opens it, librsvg sends...

PT-2013-44: Forced browsing in Siemens WinCC and SIMATIC PCS 7

The specialists of the Positive Research center have detected a vulnerability, which can be used to gain access to usernames in Siemens WinCC and SIMATIC PCS 7. The WinCC Web Navigator 7.2 allows a user with authenticated access to probe for valid NetBIOS user names by manipulating URL parameters...

PT-2013-42: SQL Injection in Siemens WinCC and SIMATIC PCS 7

The specialists of the Positive Research center have detected "SQL Injection" vulnerability in Siemens WinCC and SIMATIC PCS 7. The WinCC Web Navigator 7.2 and Runtime Client OPC protocol have input filtering in the login screen an attacker can overcome, allowing injection of SQL statements into...

PT-2014-13: Privilege Gaining in Siemens SIMATIC WinCC

The specialists of the Positive Research center have detected a Privilege Gaining vulnerability in SIMATIC WinCC. Existing access control of the WinCC WebNavigator server at port 80/tcp and port 443/tcp could allow remote authenticated users to escalate their privileges in WinCC. How to fix Updat...

PT-2014-12: Information Disclosure in Siemens SIMATIC WinCC

The specialists of the Positive Research center have detected an Information disclosure vulnerability in SIMATIC WinCC. The SIMATIC WinCC WebNavigator server at port 80/tcp and port 443/tcp could allow unauthenticated access to sensitive data if an attacker sends specially crafted HTTP requests t...

PT-2013-38: Multiple SQL Injection vulnerabilities in Wonderware Information Server

Positive Research Center experts have discovered multiple "SQL Injection" vulnerabilities in Wonderware Information Server. This vulnerability can be used by an attacker to perform database operations that were unintended by the Web application designer and, in some instances, can lead to total...

PT-2013-39: Improper Input Validation in Wonderware Information Server

Positive Research Center experts have discovered "Improper Input Validation" vulnerability in Wonderware Information Server. WIS allows access to local resources files and internal resources via unsafe parsing of XML external entities. By using specially crafted XML files, an attacker can cause W...

PT-2013-37: Multiple Cross Site Scripting (XSS) in Wonderware Information Server

Positive Research Center experts have discovered multiple "Cross Site Scripting" vulnerabilities in Wonderware Information Server. This vulnerability enables an attacker to inject client-side script into Web pages viewed by other users or bypass client-side security mechanisms imposed by modern W...

PT-2013-73: XML External Entities Resolution vulnerability in Microsoft Office Word

The specialists of the Positive Research center have detected an XML External Entities Resolution vulnerability in Microsoft Office Word and Word Viewer. The vulnerability is possible due to unsafe parsing of XML external entities. If an attacker makes a victim open a specially crafted XML...

PT-2013-72: XML External Entities Resolution vulnerability in Microsoft Office Excel

The specialists of the Positive Research center have detected an XML External Entities Resolution vulnerability in Microsoft Office Excel. The vulnerability is possible due to unsafe parsing of XML external entities. If an attacker makes a victim open a specially crafted XML document, Microsoft...

PT-2013-36: XML External Entity Injection in Wonderware Win-XML Exporter

Positive Research Center experts have discovered "XML External Entity Injection" vulnerability in Wonderware Win-XML Exporter. If an attacker manages to make a victim open a project that contains specially crafted XML, Wonderware Win-XML Exporter will automatically send the contents of local or...

PT-2013-32: Directory Traversal in Siemens Simatic WinCC TIA Portal

The specialists of the Positive Research center have detected "Directory Traversal" vulnerability in Siemens Simatic WinCC TIA Portal. By manipulating the URL an authenticated attacker may have access to source code of the panel’s server-side web application files, which may include user defined...