CVE-2015-5670

Cross-site scripting XSS vulnerability in Techno Project Japan Enisys Gw before 1.4.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-5668

SQL injection vulnerability in Techno Project Japan Enisys Gw before 1.4.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in Techno Project Japan Enisys Gw before 1.4.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Design/Logic Flaw

Techno Project Japan Enisys Gw before 1.4.1 allows remote attackers to bypass intended access restrictions and read arbitrary uploaded files via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Techno Project Japan Enisys Gw before 1.4.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-5671

CVE-2015-5671 concerns Techno Project Japan’s Enisys Gw open-source groupware. Affected: Enisys Gw 1.4.0 and earlier. Root cause: failure to restrict access permissions, allowing a remote unauthenticated attacker to read arbitrary files uploaded to the product via unspecified vectors. Impact, as ...

CVE-2015-5669

Techno Project Japan Enisys Gw before 1.4.1 allows remote authenticated users to write to arbitrary files and consequently execute arbitrary code via unspecified vectors...

CVE-2015-5670

Cross-site scripting XSS vulnerability in Techno Project Japan Enisys Gw before 1.4.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-5668

SQL injection vulnerability in Techno Project Japan Enisys Gw before 1.4.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-5669

Enisys Gw (Techno Project Japan) is affected up to version 1.4.0; CVE-2015-5669 describes a vulnerability that allows a remote authenticated user to create arbitrary files, which can lead to arbitrary code execution on the server. The JVN entry specifies Enisys Gw 1.4.0 and earlier as affected, w...

CVE-2015-5668

The CVE-2015-5668 entry concerns Techno Project Japan Enisys Gw, an open-source groupware product. A SQL injection vulnerability (CWE-89) exists in Enisys Gw prior to 1.4.1, allowing remote, unauthenticated attackers to submit specially crafted SQL queries to obtain or alter data stored in the da...

CVE-2015-5670

CVE-2015-5670 affects Enisys Gw (Techno Project Japan Co.) prior to version 1.4.1, with an XSS vulnerability (CWE-79) that allows remote injection of arbitrary script/HTML via unspecified vectors. The JVN entries and NVD description confirm the issue and specify affected versions as 1.4.0 and ear...

Enisys Gw vulnerable to cross-site scripting

Overview Enisys Gw provided by Techno Project Japan Co. is an open source groupware. Enisys Gw contains a cross-site scripting vulnerability CWE-79. Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact...

JVN#58615092: Enisys Gw vulnerable to SQL injection

Enisys Gw provided by Techno Project Japan Co. is an open source groupware. Enisys Gw contains an SQL injection vulnerability CWE-89. Impact Information stored in the database may be obtained or altered by a remote unauthenticated attacker. Solution Update the Software Update to the latest versio...

JVN#13874649: Enisys Gw vulnerable to cross-site scripting

Enisys Gw provided by Techno Project Japan Co. is an open source groupware. Enisys Gw contains a cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the latest version according to the information...

techno-science.net XSS vulnerability

Vulnerable URL: http://www.techno-science.net/?onglet=recherche=partner-pub-6990544335324031%3Ajjydfol1snd=FORID%3A10=ISO-8859-1=%22%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FXSSPOSED%2F%29%3E=Rechercher Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerabili...

kernel: usb: buffer overflow in ttusb-dec

A stack-based buffer overflow flaw was found in the TechnoTrend/Hauppauge DEC USB device driver. A local user with write access to the corresponding device could use this flaw to crash the kernel or, potentially, elevate their privileges on the system...

kernel: usb: buffer overflow in ttusb-dec

A stack-based buffer overflow flaw was found in the TechnoTrend/Hauppauge DEC USB device driver. A local user with write access to the corresponding device could use this flaw to crash the kernel or, potentially, elevate their privileges on the system...

kernel: usb: buffer overflow in ttusb-dec

A stack-based buffer overflow flaw was found in the TechnoTrend/Hauppauge DEC USB device driver. A local user with write access to the corresponding device could use this flaw to crash the kernel or, potentially, elevate their privileges on the system...

Techno Dreams FAQ Manager 1.0 - Remote SQL Injection Vulnerability

No description provided by source. Title : Techno Dreams FAQ Manager Package v1.0faqview.asp Remote SQL Injection Vulnerability Author : ajann Dork : faqview.asp?key Script Page : http://www.t-dreams.com Exploit; http://target/path/faqview.asp?key=SQL HERE Example:...