Multiple Vulnerabilities in Cisco Unified Communications Manager

Cisco Unified Communications Manager is a call processing component of a Cisco IP telephony solution. A cross-site scripting and cross-site request forgery vulnerability exists in Cisco Unified Communications Manager. An unauthenticated, remote attacker could use this vulnerability to execute...

PT-2015-5391

Name of the Vulnerable Software and Affected Versions McAfee Data Loss Prevention Endpoint DLPe versions prior to 9.3.400 Description The issue allows remote authenticated ePO users to execute arbitrary SQL commands. This could potentially lead to unauthorized data access or modification...

ReviewPost 2.84 - Multiple Vulnerabilities

ReviewPost 2.84 - Multiple Vulnerabilities ReviewPost Multiple Vulnerabilities Vendor: All Enthusiast, Inc. Product: ReviewPost Version: = 2.84 Website: http://www.reviewpost.com/ BID: 12159 CVE: CVE-2005-0270 CVE-2005-0271 CVE-2005-0272 OSVDB: 12703 12704 12705 12706 12707 12708 SECUNIA: 13697...

PT-2014-8669

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Business Warehouse affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands, potentially leading to unauthorized data access or modification. The vulnerability is related to ...

PT-2014-8670

Name of the Vulnerable Software and Affected Versions SAP Environment, Health, and Safety Management affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands, potentially leading to unauthorized data access or modification. Recommendations At...

HP Color LaserJet security vulnerabilities

Unauthorized data access, DoS...

PT-2014-2060

Name of the Vulnerable Software and Affected Versions WordPress versions 0.7 and earlier Description A SQL injection issue in the log.header.php file allows remote attackers to execute arbitrary SQL commands via the posts variable. This enables attackers to manipulate database queries, potentiall...

PHP Forge <= 3 beta 2 (id) Remote SQL Injection Vulnerability

No description provided by source. ========================================================= =============== JIKI TEAM Maroc And YameN =============== ========================================================= Author : jiko email : [email protected] Home : www.no-back.org Script : Forge 3.0 bêta...

Sigma ISP Manager 6.6 Sigmaweb.DLL SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13640/info Sigma ISP Manager is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input prior to using it in an SQL query. Successful exploitatio...

PT-2014-5800

Name of the Vulnerable Software and Affected Versions NICE Recording eXpress aka Cybertech eXpress versions 6.5.7 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands, potentially leading to unauthorized data access or modification. The exact vectors used fo...

PT-2014-5646

Name of the Vulnerable Software and Affected Versions FrontAccounting versions prior to 2.3.21 Description The issue allows remote attackers to execute arbitrary SQL commands, potentially leading to unauthorized data access or modification. Recommendations For versions prior to 2.3.21, update to...

Mail.ru: XXE and SSRF on webmaster.mail.ru

SSRF request: POST /domain/metadata HTTP/1.1 Host: webmaster.mail.ru User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.9; rv:29.0 Gecko/20100101 Firefox/29.0 Accept: application/json, text/javascript, /; q=0.01 Accept-Language: ru-RU,ru;q=0.8,en-US;q=0.5,en;q=0.3 Accept-Encoding: gzip, deflate...

PT-2014-2022 · Oracle +10 · Mysql Server +9

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.7.32 and prior MySQL Server versions 8.0.22 and prior Description: The issue exists due to insufficient input validation in the Information Schema component of MySQL Server. This allows a remote attacker to gain...

PT-2014-2736

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server versions 8.x through 8.5 FP3 IBM InfoSphere Information Server versions 8.7.x through 8.7 FP2 IBM InfoSphere Information Server versions 9.1.x through 9.1.2.0 Description The issue allows remote authenticated...

PT-2014-3277

Name of the Vulnerable Software and Affected Versions Avanset Visual CertExam Manager versions 3.3 and earlier Description The issue allows remote authenticated users to execute arbitrary SQL commands via the Title, File name, or Candidate Name field, potentially leading to unauthorized data acce...

Ecmall 2. x version exist through the kill SQL injection vulnerability-vulnerability warning-the black bar safety net

Brief description: Originally wanted to complete analysis and then struggle ECSHOP...the result has not been to old cassock opportunity to Ah,more and more can't believe is not the official version,is not under the wrong. Drink more the head a little dizzy. I don't know if the analysis is written...

Z-Blog php Edition front regular SQL blind injection vulnerability-vulnerability warning-the black bar safety net

Brief description: The second...also a bit puzzled want to ask your developer Detailed description: The problem /zbsystem/function/csystemcommon.php function GetVars$name,$type='REQUEST' if $type=='ENV' $array=&$ENV; if $type=='GET' $array=&$GET; if $type=='POST' $array=&$POST; if $type=='COOKIE'...

PT-2013-5523

Name of the Vulnerable Software and Affected Versions IBM Sterling B2B Integrator version 5.2 IBM Sterling File Gateway version 2.2 Description The issue allows remote authenticated users to execute arbitrary SQL commands, potentially leading to unauthorized data access or modification...

CVE-2013-4604: Undefined Security Weakness

Fortinet FortiOS before 5.0.3 on FortiGate devices does not properly restrict Guest capabilities, which allows remote authenticated users to read, modify, or delete the records of arbitrary users by leveraging the Guest role...

PT-2012-6274 · Carlo Gavazzi · Eos-Box

Name of the Vulnerable Software and Affected Versions: Carlo Gavazzi EOS-Box versions prior to 1.0.0.1080 2.1.10 Description: The issue allows remote attackers to execute arbitrary SQL commands, potentially leading to unauthorized data access or modification. This is achieved through SQL injectio...