CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

NVD•added 2011/09/27 7:55 p.m.•10 views

CVE-2011-3687

Multiple cross-site scripting XSS vulnerabilities in Sonexis ConferenceManager 9.2.11.0 allow remote attackers to inject arbitrary web script or HTML via 1 the txtConferenceID parameter to HostLogin.asp, 2 the txtConferenceID parameter to ParticipantLogin.asp, 3 the acp parameter to ForgotPIN.asp...

4.3CVSS5.8AI score0.00871EPSS

NVD•added 2011/09/27 7:55 p.m.•11 views

CVE-2011-3688

Multiple SQL injection vulnerabilities in Sonexis ConferenceManager 9.3.14.0 allow remote attackers to execute arbitrary SQL commands via 1 the g parameter to Conference/Audio/AudioResourceContainer.asp or 2 the txtConferenceID parameter to Login/HostLogin.asp...

7.5CVSS8.5AI score0.01088EPSS

NVD•added 2011/09/27 7:55 p.m.•15 views

CVE-2011-3686

4.3CVSS5.8AI score0.00876EPSS

Exploits1References1

Prion•added 2011/09/27 7:55 p.m.•10 views

Cross site scripting

4.3CVSS6.1AI score0.00871EPSS

Prion•added 2011/09/27 7:55 p.m.•8 views

Sql injection

7.5CVSS9.3AI score0.01088EPSS

Prion•added 2011/09/27 7:55 p.m.•15 views

Cross site scripting

4.3CVSS6.1AI score0.00876EPSS

Exploits1References1Affected Software1

Cvelist•added 2011/09/27 7:0 p.m.•26 views

CVE-2011-3686

5.8AI score0.00876EPSS

Exploits1References1

Cvelist•added 2011/09/27 7:0 p.m.•18 views

CVE-2011-3688

8.5AI score0.01088EPSS

CVE•added 2011/09/27 7:0 p.m.•35 views

CVE-2011-3687

CVE-2011-3687 concerns multiple cross-site scripting (XSS) vulnerabilities in Sonexis ConferenceManager 9.2.11.0. According to NVD and related records, attackers can inject arbitrary web script or HTML via several input points: txtConferenceID in HostLogin.asp and ParticipantLogin.asp; acp in For...

4.3CVSS5.9AI score0.00871EPSS

Cvelist•added 2011/09/27 7:0 p.m.•14 views

CVE-2011-3687

5.8AI score0.00871EPSS

CVE•added 2011/09/27 7:0 p.m.•45 views

CVE-2011-3686

CVE-2011-3686 affects Sonexis ConferenceManager (myAddressBook.asp) in versions 9.2.11.0 and 9.3.14.0. The vulnerability allows multiple XSS vectors via the parameters: fname, lname, email_edit, email, email2, email3, sms, sms_id, and work. NVD lists a CVSS v2 base score of 4.3 (network, medium c...

4.3CVSS5.9AI score0.00876EPSS

Exploits1References1Affected Software1

CVE•added 2011/09/27 7:0 p.m.•36 views

CVE-2011-3688

CVE-2011-3688 concerns multiple SQL injection vulnerabilities in Sonexis ConferenceManager 9.3.14.0 . The flaws allow remote attackers to execute arbitrary SQL commands via user-controlled input in two places: (1) the g parameter to Conference/Audio/AudioResourceContainer.asp and (2) the txtConfe...

7.5CVSS8.8AI score0.01088EPSS

securityvulns•added 2011/04/11 12:0 a.m.•127 views

Sonexis ConferenceManager SQL Injection

Vulnerability title: Sonexis ConferenceManager SQL Injection Solutionary ID: SERT-VDN-1006 Solutionary disclosure URL: http://www.solutionary.com/index/SERT/Vuln-Disclosures/Sonexis-SQL-Injection.html CVE ID: Pending CVSS risk rating: 8 Product: Sonexis ConferenceManager Application Vendor: Sonex...

0.5AI score

securityvulns•added 2011/04/11 12:0 a.m.•69 views

Sonexis ConferenceManager Multiple Cross-site Scripting (XSS) Vulnerabilities

Vulnerability title: Sonexis ConferenceManager Multiple Cross-site Scripting XSS Vulnerabilities Solutionary ID: SERT-VDN-1005 Solutionary disclosure URL: http://www.solutionary.com/index/SERT/Vuln-Disclosures/Sonexis-XSS-Vulnerabilities.html CVE ID: Pending CVSS risk rating: 3.9 Product: Sonexis...

0.2AI score

Packet Storm•added 2011/04/10 12:0 a.m.•36 views

Sonexis ConferenceManager 9.3.14.0 Blind SQL Injection

NETRAGARD ADVISORY http://www.netragard.com Research Driven Penetration Testing POSTING NOTICE -------------------------------------------------------------------------- If you intend to post this advisory on your web page please create a clickable link back to the original Netragard advisory as...

0.7AI score