EUVD-2017-8851

Malware in sbrugna...

EUVD-2017-8852

Malware in sbrugna...

EUVD-2017-8850

Malware in sbrugna...

Techno - Portfolio Management Panel Access Control Vulnerability

Techno - Portfolio Management Panel is a set of portfolio management panel scripts. An access control vulnerability exists in Techno - Portfolio Management Panel on 2017-11-16 and prior versions, which stems from the program failing to detect if a panel/portfolio.php?action=delete request is...

Techno - Portfolio Management Panel SQL Injection Vulnerability

Techno - Portfolio Management Panel is a set of portfolio management panel scripts. A SQL injection vulnerability exists in Techno - Portfolio Management Panel 2017-11-16 and earlier versions. A remote attacker can exploit the vulnerability by sending the 's' parameter to the panel/search.php fil...

Techno - Portfolio Management Panel Information Disclosure Vulnerability

Techno - Portfolio Management Panel is a set of portfolio management panel scripts. An information disclosure vulnerability exists in Techno - Portfolio Management Panel 2017-11-16 and earlier versions. An attacker can exploit the vulnerability by sending an invalid 's' parameter to the...

Design/Logic Flaw

Techno - Portfolio Management Panel through 2017-11-16 allows XSS via the panel/search.php s parameter...

CVE-2017-17695

Techno - Portfolio Management Panel through 2017-11-16 allows SQL Injection via the panel/search.php s parameter...

Sql injection

Techno - Portfolio Management Panel through 2017-11-16 allows SQL Injection via the panel/search.php s parameter...

CVE-2017-17694

Techno - Portfolio Management Panel through 2017-11-16 allows XSS via the panel/search.php s parameter...

CVE-2017-17695

Techno - Portfolio Management Panel through 2017-11-16 allows SQL Injection via the panel/search.php s parameter...

CVE-2017-17696

Techno - Portfolio Management Panel through 2017-11-16 allows full path disclosure via an invalid s parameter to panel/search.php...

PT-2017-14954

Name of the Vulnerable Software and Affected Versions Techno - Portfolio Management Panel versions prior to 2017-11-16 Description The issue allows for XSS via the s parameter in the "panel/search.php" endpoint. Recommendations For versions prior to 2017-11-16, update to a version released after...

PT-2017-14955

Name of the Vulnerable Software and Affected Versions Techno - Portfolio Management Panel versions prior to 2017-11-16 Description The issue allows SQL Injection via the panel/search.php endpoint, specifically through the s parameter. Recommendations For versions prior to 2017-11-16, update to a...

PT-2017-14953

Name of the Vulnerable Software and Affected Versions Techno - Portfolio Management Panel through 2017-11-16 Description The issue concerns a lack of authorization checks for specific requests. Specifically, the panel/portfolio.php endpoint, when invoked with the action=delete parameter, does not...

CVE-2017-17693: Missing Authorization

Techno - Portfolio Management Panel through 2017-11-16 does not check authorization for panel/portfolio.php?action=delete requests that remove feedback...

CVE-2017-17695: Improper Neutralization of Special Elements used in an SQL Command

Techno - Portfolio Management Panel through 2017-11-16 allows SQL Injection via the panel/search.php s parameter...

CVE-2017-17694: Improper Neutralization of Input During Web Page Generation

Techno - Portfolio Management Panel through 2017-11-16 allows XSS via the panel/search.php s parameter...

CVE-2017-17696: Exposure of Sensitive Information to an Unauthorized Actor

Techno - Portfolio Management Panel through 2017-11-16 allows full path disclosure via an invalid s parameter to panel/search.php...

PT-2017-14956

Name of the Vulnerable Software and Affected Versions Techno - Portfolio Management Panel versions prior to 2017-11-16 Description The issue allows full path disclosure via an invalid s parameter to the "panel/search.php" endpoint. Recommendations For versions prior to 2017-11-16, consider...