Multiple vulnerabilities in Sage Saleslogix

Agenda Security Services Security Vulnerability Advisory Product: SalesLogix Server and Web Client Vendor: Sage Homepage: http://www.saleslogix.com Platforms: Microsoft Windows Impact: Bypass authentication Privilege escalation SQL injection Information leaks Arbitrary file creation Directory...

SLX Server 6.1 - Arbitrary File Creation

SLX Server 6.1 - Arbitrary File Creation !/usr/bin/perl Proof of concept exploit: Arbitrary file creation for SLX server 6.1 Written by Carl Livitt, Agenda Security Services, June 2004. This exploit abuses the ProcessQueueFile command on SLX 6.1 others? servers to create arbitrary files on the...