Microsoft IIS Directory Traversal Vulnerability (MS04-017) - Active Check

A directory traversal vulnerability exists in Crystal Reports and Crystal Enterprise from Business Objects that runs on Microsoft IIS which could allow information disclosure and denial of service attacks on an affected system. SPDX-FileCopyrightText: 2009 Christian Eric Edjenguele Some text...

SalesCart (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================== SalesCart Auth Bypass SQL Injection Vulnerability =================================================== Script :SalesCart Product Management Plugin Site :http://www.salescart.com Demo...

CVE-2009-0324

Multiple SQL injection vulnerabilities in BibCiter 1.4 allow remote attackers to execute arbitrary SQL commands via the 1 idp parameter to reports/projects.php, the 2 idc parameter to reports/contacts.php, and the 3 idu parameter to reports/users.php...

Sql injection

Multiple SQL injection vulnerabilities in BibCiter 1.4 allow remote attackers to execute arbitrary SQL commands via the 1 idp parameter to reports/projects.php, the 2 idc parameter to reports/contacts.php, and the 3 idu parameter to reports/users.php...

CVE-2009-0324

CVE-2009-0324 describes multiple SQL injection vulnerabilities in BibCiter 1.4. The affected components are the PHP scripts reports/projects.php (parameter idp), reports/contacts.php (parameter idc), and reports/users.php (parameter idu). The root cause is unsanitized input leading to arbitrary S...

CVE-2009-0324: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in BibCiter 1.4 allow remote attackers to execute arbitrary SQL commands via the 1 idp parameter to reports/projects.php, the 2 idc parameter to reports/contacts.php, and the 3 idu parameter to reports/users.php...

Joomla! Component Camelcitydb2 2.2 - SQL Injection

Joomla! Component Camelcitydb2 2.2 - SQL Injection Joomla Component Camelcitydb2 SQL Injection Vulnerability Vulnerability found by: H!tm@N Contact: khghitmanatgmaildotcom Site: www.khg-crew.ws Greetz: boom3rang, KHG, urtan, warning, chs, redc00de - -=Kosova Hackers Group=- ScriptName: "Joomla"...

Microsoft Internet Explorer XML Handling Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Successful exploits will compromise the application and possibly the underlying computer. Faile...

CVE-2008-2619

Unspecified vulnerability in the Oracle Reports Developer component in Oracle Application Server 1.0.2.2, 9.0.4.3, and 10.1.2.2, and E-Business Suite 11.5.10.2, allows remote authenticated users to affect availability via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Reports Developer component in Oracle Application Server 1.0.2.2, 9.0.4.3, and 10.1.2.2, and E-Business Suite 11.5.10.2, allows remote authenticated users to affect availability via unknown vectors...

CVE-2008-2619

Unspecified vulnerability in the Oracle Reports Developer component in Oracle Application Server 1.0.2.2, 9.0.4.3, and 10.1.2.2, and E-Business Suite 11.5.10.2, allows remote authenticated users to affect availability via unknown vectors...

CVE-2008-2619

The CVE-2008-2619 entry describes an unspecified vulnerability in the Oracle Reports Developer component of Oracle Application Server (versions 1.0.2.2, 9.0.4.3, 10.1.2.2) and E-Business Suite 11.5.10.2. It allows remote authenticated users to affect availability via unknown vectors. The connecte...

CVE-2008-2619: Undefined Security Weakness

Unspecified vulnerability in the Oracle Reports Developer component in Oracle Application Server 1.0.2.2, 9.0.4.3, and 10.1.2.2, and E-Business Suite 11.5.10.2, allows remote authenticated users to affect availability via unknown vectors...

Directory traversal

Cisco Unity 4.x before 4.21ES161, 5.x before 5.01ES53, and 7.x before 7.02ES8 uses weak permissions for the D:\CommServer\Reports directory, which allows remote authenticated users to obtain sensitive information by reading files in this directory...

CVE-2008-4545

Cisco Unity 4.x before 4.21ES161, 5.x before 5.01ES53, and 7.x before 7.02ES8 uses weak permissions for the D:\CommServer\Reports directory, which allows remote authenticated users to obtain sensitive information by reading files in this directory...

CVE-2008-4545: Undefined Security Weakness

Cisco Unity 4.x before 4.21ES161, 5.x before 5.01ES53, and 7.x before 7.02ES8 uses weak permissions for the D:\CommServer\Reports directory, which allows remote authenticated users to obtain sensitive information by reading files in this directory...

PT-2008-5381 · Ledgersmb +2 · Ledgersmb +2

Name of the Vulnerable Software and Affected Versions: LedgerSMB versions prior to 1.2.15 SQL-Ledger versions prior to 2.8.18 Description: The issue allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. This is a SQL injection vulnerability in the AR/AP...

Open Azimyt CMS <= 0.22 (lang) Local File Inclusion Vulnerability

No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-08-026 Application: Open Azimyt CMS Versions Affected: 0.22 minimal, 0.21 stable Vendor URL: http://azimyt.net/ Bug: Local File Include Exploits: YES Reported: 07.06.2008 Vendor Response: 08.06.2008 Solution...

OneCMS 2.5 (install_mod.php) Local File Inclusion Vulnerability

No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-08-034 Application: OneCMS Versions Affected: 2.5 Vendor URL: http://www.insanevisions.com/ Bug: Local File Include Exploits: YES Reported: 26.03.2008 Vendor Response: NONE Solution: NONE Date of Public...

Internet Scanner reporting engine vulnerable to cross-site scripting

Overview IBM Internet Scanner has a function to generate a report as an HTML file. Internet Scanner's reporting engine does not properly sanitize data before generating this report. This vulnerability may allow an attacker to insert an arbitrary script, which is executed on the user's web browser...