Lucene search
+L

542 matches found

Prion
Prion
•added 2014/09/29 1:55 a.m.•22 views

Information disclosure

The Abraham Tours aka com.mytoursapp.android.app432 application 1.1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS6.4AI score0.00266EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2014/09/29 1:00 a.m.•36 views

CVE-2014-6782

The Abraham Tours aka com.mytoursapp.android.app432 application 1.1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.9AI score0.00266EPSS
SaveExploits0References3
CVE
CVE
•added 2014/09/29 1:00 a.m.•60 views

CVE-2014-6782

The CVE-2014-6782 entry affects the Android app Abraham Tours (com.mytoursapp.android.app432), version 1.1.2, noting that it does not verify X.509 certificates from SSL servers. This enables man-in-the-middle attackers to spoof legitimate servers and extract sensitive data via a crafted certifica...

5.4CVSS6AI score0.00266EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2014/09/29 12:00 a.m.•1 views

PT-2014-7460

Name of the Vulnerable Software and Affected Versions Abraham Tours aka com.mytoursapp.android.app432 version 1.1.2 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509...

5.4CVSS0.00266EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/09/29 12:00 a.m.•7 views

CVE-2014-6782: Undefined Security Weakness

The Abraham Tours aka com.mytoursapp.android.app432 application 1.1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.8AI score0.00266EPSS
SaveExploits0References2
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•37 views

Tours Manager 1.0 - (cityview.php cityid) SQL Injection Vulnerability

No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= IN THE NAME OF ALLAH -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Tour...

7.1AI score
SaveExploits0
securityvulns
securityvulns
•added 2010/11/04 12:00 a.m.•67 views

HP LoadRunner Web Tours DoS

No description provided...

7.5CVSS1.1AI score0.02265EPSS
SaveExploits0References1Affected Software1
securityvulns
securityvulns
•added 2010/11/04 12:00 a.m.•75 views

[security bulletin] HPSBMA02533 SSRT080049 rev.1 - HP LoadRunner Web Tours 9.10 Remote Denial of Service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02165172 Version: 1 HPSBMA02533 SSRT080049 rev.1 - HP LoadRunner Web Tours 9.10 Remote Denial of Service NOTICE: The information in this Security Bulletin should be acted upon as soon as possible...

7.5CVSS0.1AI score0.02265EPSS
SaveExploits0
NVD
NVD
•added 2010/10/28 8:00 p.m.•34 views

CVE-2010-4028

Unspecified vulnerability in LoadRunner Web Tours 9.10 in HP LoadRunner 9.1 and earlier allows remote attackers to cause a denial of service, and possibly obtain sensitive information or modify data, via unknown vectors...

7.5CVSS6.7AI score0.02265EPSS
SaveExploits0References2
Prion
Prion
•added 2010/10/28 8:00 p.m.•28 views

Code injection

Unspecified vulnerability in LoadRunner Web Tours 9.10 in HP LoadRunner 9.1 and earlier allows remote attackers to cause a denial of service, and possibly obtain sensitive information or modify data, via unknown vectors...

7.5CVSS7.4AI score0.02265EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
•added 2010/10/28 7:00 p.m.•41 views

CVE-2010-4028

Unspecified vulnerability in LoadRunner Web Tours 9.10 in HP LoadRunner 9.1 and earlier allows remote attackers to cause a denial of service, and possibly obtain sensitive information or modify data, via unknown vectors...

6.7AI score0.02265EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/10/28 12:00 a.m.•10 views

CVE-2010-4028: Undefined Security Weakness

Unspecified vulnerability in LoadRunner Web Tours 9.10 in HP LoadRunner 9.1 and earlier allows remote attackers to cause a denial of service, and possibly obtain sensitive information or modify data, via unknown vectors...

7.5CVSS5.8AI score0.02265EPSS
SaveExploits0References1
NVD
NVD
•added 2009/02/26 4:17 p.m.•26 views

CVE-2008-6289

SQL injection vulnerability in cityview.php in Tours Manager 1.0 allows remote attackers to execute arbitrary SQL commands via the cityid parameter...

7.5CVSS8.4AI score0.00973EPSS
SaveExploits2References4
Prion
Prion
•added 2009/02/26 4:17 p.m.•26 views

Sql injection

SQL injection vulnerability in cityview.php in Tours Manager 1.0 allows remote attackers to execute arbitrary SQL commands via the cityid parameter...

7.5CVSS9.1AI score0.00973EPSS
SaveExploits2References4Affected Software1
Cvelist
Cvelist
•added 2009/02/26 4:00 p.m.•43 views

CVE-2008-6289

SQL injection vulnerability in cityview.php in Tours Manager 1.0 allows remote attackers to execute arbitrary SQL commands via the cityid parameter...

8.4AI score0.00973EPSS
SaveExploits2References4
CVE
CVE
•added 2009/02/26 4:00 p.m.•67 views

CVE-2008-6289

The CVE identifies an SQL injection in cityview.php of Tours Manager 1.0, exploitable via the cityid parameter. Affected component/function is cityview.php; underlying issue is improper input handling allowing arbitrary SQL execution. The primary sources (NVD/NVD-linked records) confirm remote ex...

7.5CVSS8.7AI score0.00973EPSS
SaveExploits2References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/02/26 12:00 a.m.•5 views

CVE-2008-6289: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in cityview.php in Tours Manager 1.0 allows remote attackers to execute arbitrary SQL commands via the cityid parameter...

7.5CVSS6.4AI score0.00973EPSS
SaveExploits2References2
Packet Storm
Packet Storm
•added 2008/11/05 12:00 a.m.•33 views

toursmanager-sql.txt

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= IN THE NAME OF ALLAH -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Tours Manager v1 cityview.php cityid SQ...

7.4AI score
SaveExploits0
seebug.org
seebug.org
•added 2008/11/05 12:00 a.m.•28 views

Tours Manager v1 (cityview.php cityid) SQL Injection Vulnerability

No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= IN THE NAME OF ALLAH -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Tour...

7.1AI score
SaveExploits0
zdt
zdt
•added 2008/11/04 12:00 a.m.•41 views

Tours Manager v1 (cityview.php cityid) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== Tours Manager v1 cityview.php cityid SQL Injection Vulnerability ==================================================================...

7.1AI score
SaveExploits0
Rows per page
Query Builder