137 matches found
login.quickbooks.com XSS vulnerability
Open Bug Bounty ID: OBB-198619 Description| Value ---|--- Affected Website:| login.quickbooks.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Intuit QuickBooks SQL Injection Vulnerability
Intuit QuickBooks is a suite of small financial management software from Intuit, USA. A SQL injection vulnerability exists in Intuit QuickBooks versions 2007 to 2016, which can be exploited by an attacker to take full control of the program and access or modify data...
Intuit QuickBooks Desktop 2007 2016 - Arbitrary Code Execution
Intuit QuickBooks Desktop 2007 2016 - Arbitrary Code Execution + Credits: Maxim Tomashevich from Thegrideon Software + Website: https://www.thegrideon.com/ + Details: https://www.thegrideon.com/qb-internals-sql.html Vendor: --------------------- www.intuit.com www.intuit.ca www.intuit.co.uk...
Intuit QuickBooks Desktop 2007 < 2016 - Arbitrary Code Execution
Exploit for windows platform in category local exploits + Credits: Maxim Tomashevich from Thegrideon Software + Website: https://www.thegrideon.com/ + Details: https://www.thegrideon.com/qb-internals-sql.html Vendor: --------------------- www.intuit.com www.intuit.ca www.intuit.co.uk Product:...
Intuit QuickBooks Desktop 2007 < 2016 - Arbitrary Code Execution
Credits: Maxim Tomashevich from Thegrideon Software + Website: https://www.thegrideon.com/ + Details: https://www.thegrideon.com/qb-internals-sql.html Vendor: --------------------- www.intuit.com www.intuit.ca www.intuit.co.uk Product: --------------------- QuickBooks Desktop versions: 2007 -...
Threat Outbreak Alert RuleID22503: Email Messages Distributing Malicious Software on April 27, 2016
Medium Alert ID: 44853 First Published: 2016 April 27 13:48 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID22503 may contain the following files: Name | Si...
Threat Outbreak Alert RuleID22043: Email Messages Distributing Malicious Software on April 1, 2016
Medium Alert ID: 44457 First Published: 2016 April 4 13:51 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID22043 may contain the following files: Name | Siz...
Threat Outbreak Alert RuleID22041: Email Messages Distributing Malicious Software on April 1, 2016
Medium Alert ID: 44420 First Published: 2016 April 1 16:21 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID22041 may contain the following files: Name | Siz...
Threat Outbreak Alert RuleID21931: Email Messages Distributing Malicious Software on March 25, 2016
Medium Alert ID: 44322 First Published: 2016 March 25 20:44 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21931 and RuleID21931KVR may contain the followi...
Threat Outbreak Alert RuleID20754: Email Messages Distributing Malicious Software on January 27, 2016
Medium Alert ID: 43240 First Published: 2016 January 27 19:50 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20754 may contain the following files: Name |...
Threat Outbreak Alert RuleID19510: Email Messages Distributing Malicious Software on November 18, 2015
Medium Alert ID: 42153 First Published: 2015 November 18 21:45 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19510 may contain the following files: Name |...
QUICKBOOKS ONLINE Cloud Service Detection
Binary data 8504.prm...
phpmoneybooks 1.03 - Stored XSS
No description provided by source. Exploit Title: phpmoneybooks 1.03 Stored XSS Date: Jun 28, 2012 Exploit Author: chap0 - chap0.blogspot.com - @chap0 Vendor Homepage: http://phpmoneybooks.com/ Software Link: http://sourceforge.net/projects/phpmoneybooks/files/phpMoneyBooks103.zip/download Versio...
CVE-2010-5198
Multiple untrusted search path vulnerabilities in Intuit QuickBooks 2010 allow local users to gain privileges via a Trojan horse 1 dbicudtx11.dll, 2 mfc90enu.dll, or 3 mfc90loc.dll file in the current working directory, as demonstrated by a directory that contains a .des, .qbo, or .qpg file. NOTE...
Design/Logic Flaw
Multiple untrusted search path vulnerabilities in Intuit QuickBooks 2010 allow local users to gain privileges via a Trojan horse 1 dbicudtx11.dll, 2 mfc90enu.dll, or 3 mfc90loc.dll file in the current working directory, as demonstrated by a directory that contains a .des, .qbo, or .qpg file. NOTE...
CVE-2010-5198
Multiple untrusted search path vulnerabilities in Intuit QuickBooks 2010 allow local users to gain privileges via a Trojan horse 1 dbicudtx11.dll, 2 mfc90enu.dll, or 3 mfc90loc.dll file in the current working directory, as demonstrated by a directory that contains a .des, .qbo, or .qpg file. NOTE...
CVE-2010-5198
CVE-2010-5198 affects Intuit QuickBooks 2010. The issue is described as multiple untrusted search path vulnerabilities that allow local privilege escalation when a malicious DLL is placed in the current working directory. Specifically, the vulnerable components are (1) dbicudtx11.dll, (2) mfc90en...
phpmoneybooks 1.03 Stored XSS
Exploit for php platform in category web applications Exploit Title: phpmoneybooks 1.03 Stored XSS Date: Jun 28, 2012 Exploit Author: chap0 - chap0.blogspot.com - @chap0 Vendor Homepage: http://phpmoneybooks.com/ Software Link:...
PHP Money Books 1.03 Stored Cross Site Scripting
Exploit Title: phpmoneybooks 1.03 Stored XSS Date: Jun 28, 2012 Exploit Author: chap0 - chap0.blogspot.com - @chap0 Vendor Homepage: http://phpmoneybooks.com/ Software Link: http://sourceforge.net/projects/phpmoneybooks/files/phpMoneyBooks103.zip/download Version: 1.03 Patch: Upgrade to 1.04 Vend...
CVE-2012-2418
Heap-based buffer overflow in the intu-help-qb aka Intuit Help System Async Pluggable Protocol handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, allows remote attackers to cause a denial of service memory corruption or possibly...