EUVD-2015-6469

Malware in sbrugna...

LMA ISIDA Retriever 跨站脚本漏洞

LMA-ISIDA Retriever is an application of the Russian company LMA-ISIDA. It provides management and information support on enterprise, regional scale. A cross-site scripting vulnerability exists in LMA ISIDA Retriever version 5.2, which stems from the lack of proper validation of client data for...

Oracle WebCenter Content 'GET_SEARCH_RESULTS' SQL Injection

The Oracle WebCenter Content install on the remote host does not properly sanitize the 'SortField', 'SortOrder', and 'QueryText' parameters of the 'GETSEARCHRESULTS' IDC service. An attacker can exploit this flaw to launch SQL injection attacks which could lead to authentication bypass, disclosur...