CVE-2020-29027 Reflected Cross Site Scripting

Cross-site Scripting XSS vulnerability in GUI of Secomea SiteManager could allow an attacker to cause an XSS Attack. This issue affects: Secomea SiteManager all versions prior to 9.3...

CVE-2020-29025 DOM-based Javascript injection

A vulnerability in SiteManager-Embedded SM-E Web server which may allow attacker to construct a URL that if visited by another application user, will cause JavaScript code supplied by the attacker to execute within the user's browser in the context of that user's session with the application. Thi...

CVE-2020-29025

CVE-2020-29025 affects the SiteManager-Embedded (SM-E) Web server. It describes a DOM-based JavaScript injection where an attacker can construct a URL that, if visited by another application user, executes attacker-supplied JavaScript in that user’s browser within their session context. Affected:...

SiteManager-Embedded Web server Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability exists in SiteManager-Embedded Web server, which stems from a lack of proper validation of client-side data by the WEB application. An attacker could exploit this vulnerability to execute client-side code...

CVE-2020-11641

A local file inclusion vulnerability in B&R SiteManager versions 9.2.620236042 allows authenticated users to read sensitive files from SiteManager instances...

CVE-2020-11642

The local file inclusion vulnerability present in B&R SiteManager versions 9.2.620236042 allows authenticated users to impact availability of SiteManager instances...

CVE-2020-11642

The local file inclusion vulnerability present in B&R SiteManager versions 9.2.620236042 allows authenticated users to impact availability of SiteManager instances...

Remote file inclusion

A local file inclusion vulnerability in B&R SiteManager versions 9.2.620236042 allows authenticated users to read sensitive files from SiteManager instances...

Remote file inclusion

The local file inclusion vulnerability present in B&R SiteManager versions 9.2.620236042 allows authenticated users to impact availability of SiteManager instances...

CVE-2020-11642

CVE-2020-11642 affects B&R SiteManager (all versions

CVE-2020-11642 SiteManager Denial of Service via Local File Inclusion Vulnerability

The local file inclusion vulnerability present in B&R SiteManager versions 9.2.620236042 allows authenticated users to impact availability of SiteManager instances...

CVE-2020-11641

CVE-2020-11641 is a path traversal vulnerability affecting B&R SiteManager (all versions before v9.2.620236042) and GateManager (before v9.0.20262 for 4260/9250, and before v9.2.620236042 for 8250). The authenticated attacker can read sensitive files from SiteManager instances, leveraging imprope...

CVE-2020-11641 SiteManager Local File Inclusion Vulnerability

A local file inclusion vulnerability in B&R SiteManager versions 9.2.620236042 allows authenticated users to read sensitive files from SiteManager instances...

B&R Automation SiteManager and GateManager

1. EXECUTIVE SUMMARY CVSS v3 7.7 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: B&R Industrial Automation GmbH Equipment: SiteManager and GateManager Vulnerabilities: Path Traversal, Uncontrolled Resource Consumption, Information Exposure, Improper Authentication, Information...

On-Liners WebDesign SiteManager 2.3 SQL Injection

Exploit Title : On-Liners WebDesign SiteManager V2.3 Onliners S.A.R.L SQL Injection Author Discovered By : KingSkrupellos Date : 30/12/2018 Vendor Homepage : On-Liners.Com Category : WebApps Tested On : Windows and Linux Exploit Risk : Medium Web Server : Nginx 1.10.3 JavaScript Frameworks : jQue...

CVE-2010-1331

SQL injection vulnerability in Heartlogic HL-SiteManager allows remote attackers to execute arbitrary SQL commands via unknown vectors...

Sql injection

SQL injection vulnerability in Heartlogic HL-SiteManager allows remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2010-1331

The CVE-2010-1331 entry concerns Heartlogic HL-SiteManager, a CMS product, with a SQL injection vulnerability that could allow a remote attacker to view or modify information stored by the product. Affected component is HL-SiteManager; underlying issue is SQL injection via unspecified vectors. Ex...

CVE-2010-1331

SQL injection vulnerability in Heartlogic HL-SiteManager allows remote attackers to execute arbitrary SQL commands via unknown vectors...

McAfee ePolicy Orchestrator SiteManager ExportSiteList buffer overflow

Added: 05/11/2007 CVE: CVE-2007-1498 BID: 22952 OSVDB: 33796 Background ePolicy Orchestrator is a centralized security configuration and monitoring application. It includes the SiteManager ActiveX control which is implemented by sitemanager.dll. Problem A buffer overflow vulnerability in the...