4230 matches found
WordPress Plugin CP Reservation Calendar 1.1.6 - SQL Injection
WordPress Plugin CP Reservation Calendar 1.1.6 - SQL Injection Exploit Title: WordPress: cp-reservation-calendar 1.1.6 SQLi injection Date: 2015-09-15 Google Dork: Index of /wp-content/plugins/cp-reservation-calendar/ Exploit Author: Joaquin Ramirez Martinez i0akiN SEC-LABORATORY Software Link:...
WordPress Plugin CP Reservation Calendar 1.1.6 - SQL Injection
Exploit Title: WordPress: cp-reservation-calendar 1.1.6 SQLi injection Date: 2015-09-15 Google Dork: Index of /wp-content/plugins/cp-reservation-calendar/ Exploit Author: Joaquin Ramirez Martinez i0akiN SEC-LABORATORY Software Link: https://downloads.wordpress.org/plugin/cp-reservation-calendar.z...
CVE-2015-5196
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-7703. Reason: This candidate is a reservation duplicate of CVE-2015-7703. Notes: All CVE users should reference CVE-2015-7703 instead of this candidate. All references and descriptions in this candidate have been removed to...
CVE-2015-5193
The CVE-2015-7703 entry concerns ntpd (NTP). The vulnerability arises when ntpd is configured to allow remote configuration and the attacker knows the remote configuration password; using the :config command, they can write to arbitrary files because of how pidfile and driftfile paths are set. Af...
JeeCMS Government Service Center Member Reservation SQL Injection Vulnerability
JEECMS is the domestic Java version of the open source web content management system java cms, jsp cms for short. JeeCMS Government Government Service Center , member reservation function SQL injection vulnerability exists. Allow attackers to exploit the vulnerability to obtain sensitive...
CVE-2015-2212
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-5623. Reason: This candidate is a reservation duplicate of CVE-2015-5623. Notes: All CVE users should reference CVE-2015-5623 instead of this candidate. All references and descriptions in this candidate have been removed to...
Webservice-DIC yoyaku_v41 Unauthorized Operation Vulnerability
Webservice-DIC yoyakuv41 is a conference room reservation management software from Webservice-DIC. Webservice-DIC yoyakuv41 fails to properly filter user-submitted input, which allows remote attackers to bypass authentication by submitting a special request to complete a conference room reservati...
CVE-2015-2978
Webservice-DIC yoyakuv41 allows remote attackers to bypass authentication and complete a conference-room reservation via unspecified vectors, as demonstrated by an "unintentional reservation."...
Authentication flaw
Webservice-DIC yoyakuv41 allows remote attackers to bypass authentication and complete a conference-room reservation via unspecified vectors, as demonstrated by an "unintentional reservation."...
CVE-2015-2978
Webservice-DIC yoyakuv41 allows remote attackers to bypass authentication and complete a conference-room reservation via unspecified vectors, as demonstrated by an "unintentional reservation."...
yoyaku_v41 vulnerable to authentication bypass
Overview yoyakuv41 provided by Webservice-DIC is a software to manage conference room reservations. yoyakuv41 contains an authentication bypass vulnerability CWE-592. Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...
CVE-2015-2978: Improper Authentication
Webservice-DIC yoyakuv41 allows remote attackers to bypass authentication and complete a conference-room reservation via unspecified vectors, as demonstrated by an "unintentional reservation."...
PT-2015-6025
Name of the Vulnerable Software and Affected Versions Webservice-DIC yoyaku version v41 Description The issue allows remote attackers to bypass authentication, enabling them to complete a conference-room reservation. This can be achieved through unspecified vectors, resulting in an "unintentional...
ihg.com XSS vulnerability
Vulnerable URL: https://www.ihg.com/hotels/ru/ru/reservation/searchresult?qAdlt=1=0=45675"-confirm'XSSposed'-"108=0=0=rt=sr=1=1=12=6CBARC=1=3=sBR=0u=1 Details: Description| Value ---|--- Patched:| Yes, at 24.11.2015 Latest check for patch:| 24.11.2015 09:25 GMT Vulnerability type:| XSS...
Cisco IOS XR Denial of Service Vulnerability (CNVD-2015-01497)
Cisco IOS XR is the United States Cisco Cisco company's IOS software series in a fully modular, distributed network operating system. A security vulnerability exists in Cisco IOS XR. A remote attacker can exploit this vulnerability to cause a denial of service RSVP process reload with malformed...
CVE-2015-0246
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-1493. Reason: This candidate is a reservation duplicate of CVE-2015-1493. Notes: All CVE users should reference CVE-2015-1493 instead of this candidate. All references and descriptions in this candidate have been removed to...
Marriott Fixes Simple Bug in Web Service That Could Explose Customer Data
Customer payment information and other data was made vulnerable by a flaw in the Marriott Web service used by the Android app as well as the Web site, a security researcher found. The vulnerability is the result of Marriott’s system failing to use any kind of authentication on requests, meaning...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-9323. Reason: This candidate is a reservation duplicate of CVE-2014-9323. Notes: All CVE users should reference CVE-2014-9323 instead of this candidate. All references and descriptions in this candidate have been removed to...
CVE-2014-9492
CVE-2014-9492 is a reservation duplicate of CVE-2014-9323; connected advisories confirm CVE-2014-9323 affects Firebird, with a remote denial-of-service vector via malformed packets and potential arbitrary code execution via UDF libraries (as referenced in OSV-USN-3929-1 and related Debian/Ubuntu/...