Sql injection

SQL injection vulnerability in default.php in Cornerstone Technologies webConductor allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-5287

CVE-2010-5287 : The connected records confirm a SQL injection in Cornerstone Technologies’ webConductor, via default.php and the id parameter, allowing remote command execution. The vulnerability is described consistently across NVD and related records as an input validation flaw leading to arbit...

CVE-2010-5287

SQL injection vulnerability in default.php in Cornerstone Technologies webConductor allows remote attackers to execute arbitrary SQL commands via the id parameter...

PT-2013-19: XML External Entities Resolution vulnerability in HP ArcSight Connector

The specialists of the Positive Research center have detected an XML External Entities Resolution vulnerability in HP ArcSight Connector. An attacker is able to import a specially crafted XML file, which would force ArcSight Connector to disclose local or remote resources to a malicious server on...

Fedora Update for xulrunner FEDORA-2013-0885

Check for the Version of xulrunner OpenVAS Vulnerability Test Fedora Update for xulrunner FEDORA-2013-0885 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Fedora Update for xulrunner FEDORA-2013-0891

Check for the Version of xulrunner OpenVAS Vulnerability Test Fedora Update for xulrunner FEDORA-2013-0891 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

CVE-2012-3172

Unspecified vulnerability in the Siebel CRM component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect availability via unknown vectors related to Siebel Apps - Multi-channel Technologies...

Code injection

Unspecified vulnerability in the Siebel CRM component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect availability via unknown vectors related to Siebel Apps - Multi-channel Technologies...

CVE-2012-3172

CVE-2012-3172 is an Oracle Siebel CRM vulnerability affecting Siebel CRM 8.1.1 and 8.2.2 in the Siebel Apps - Multi-channel Technologies area. The connected Nessus/NASL entry notes an easily exploitable flaw that enables authenticated network attackers to trigger a partial denial of service via H...

CVE-2012-1680

Unspecified vulnerability in the Siebel CRM component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Siebel Apps - Multi-channel Technologies...

CVE-2012-1680: Undefined Security Weakness

Unspecified vulnerability in the Siebel CRM component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Siebel Apps - Multi-channel Technologies...

PT-2013-1530

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 8.1.1 through 8.2.2 Description The issue affects confidentiality and can be exploited by remote authenticated users via unknown vectors related to Siebel Apps - Multi-channel Technologies. Recommendations For Oracle...

PT-2013-1574

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 8.1.1 through 8.2.2 Description The issue affects the availability of the system, allowing remote authenticated users to exploit it via unknown vectors related to Siebel Apps - Multi-channel Technologies...

CVE-2012-3172: Undefined Security Weakness

Unspecified vulnerability in the Siebel CRM component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect availability via unknown vectors related to Siebel Apps - Multi-channel Technologies...

PT-2013-01: XML External Entity Injection in GNOME

Positive Research Center experts have detected a local resources access vulnerability files and internal network resources via XML External Entity enabled in GNOME. An attacker is able to give a user a specially crafted file. If he or she views a folder with the file or opens it, librsvg sends...

PT-2013-44: Forced browsing in Siemens WinCC and SIMATIC PCS 7

The specialists of the Positive Research center have detected a vulnerability, which can be used to gain access to usernames in Siemens WinCC and SIMATIC PCS 7. The WinCC Web Navigator 7.2 allows a user with authenticated access to probe for valid NetBIOS user names by manipulating URL parameters...

PT-2013-42: SQL Injection in Siemens WinCC and SIMATIC PCS 7

The specialists of the Positive Research center have detected "SQL Injection" vulnerability in Siemens WinCC and SIMATIC PCS 7. The WinCC Web Navigator 7.2 and Runtime Client OPC protocol have input filtering in the login screen an attacker can overcome, allowing injection of SQL statements into...

Oracle Java Runtime Environment CVE-2013-0422 Multiple Remote Code Execution Vulnerabilities

Description Oracle Java Runtime Environment is prone to multiple remote code execution vulnerabilities. An attacker can exploit these issues to execute arbitrary code in the context of the application. Versions prior to Oracle JRE 1.7.0 Update 11 are vulnerable. Technologies Affected CentOS CentO...

Advantech WebAccess HMI/SCADA Software Persistence XSS Vulnerability

Advantech WebAccess HMI/SCADA software version 7.0-2012.12.05 suffers from a persistent cross site scripting vulnerability. Title : Advantech WebAccess HMI/SCADA Software Persistence Cross-Site Scripting Vulnerability Author : Antu Sanadi SecPod Technologies www.secpod.com Vendor :...

Advantech WebAccess HMI/SCADA Cross Site Scripting

Title : Advantech WebAccess HMI/SCADA Software Persistence Cross-Site Scripting Vulnerability Author : Antu Sanadi SecPod Technologies www.secpod.com Vendor : http://webaccess.advantech.com/ Advisory : http://secpod.org/blog/?p=569...