PT-2012-6274 · Carlo Gavazzi · Eos-Box

Name of the Vulnerable Software and Affected Versions: Carlo Gavazzi EOS-Box versions prior to 1.0.0.1080 2.1.10 Description: The issue allows remote attackers to execute arbitrary SQL commands, potentially leading to unauthorized data access or modification. This is achieved through SQL injectio...

PT-2012-5675

Name of the Vulnerable Software and Affected Versions Agile FleetCommander versions prior to 4.08 Agile FleetCommander Kiosk versions prior to 4.08 Description The issue allows remote attackers to execute arbitrary SQL commands, potentially leading to unauthorized data access or modification...

PT-2012-2820

Name of the Vulnerable Software and Affected Versions IBM Maximo Asset Management versions 7.1 through 7.5 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This can be done via unspecified vectors, potentially leading to unauthorized data access or...

Solaris 10 (x86) : 141105-04 (deprecated)

Vulnerability in the Solaris component of Oracle Sun Products Suite subcomponent: Solaris Management Console. The supported version that is affected is 10. Difficult to exploit vulnerability allows successful unauthenticated network attacks via HTTP. Successful attack of this vulnerability can...

PT-2012-1230

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware version 10.1.3.5 Description The issue is related to insufficient protection of service data in the Designer subcomponent of the Oracle WebCenter Forms Recognition component. This can be exploited by a remote attacker ...

PT-2012-1899

Name of the Vulnerable Software and Affected Versions Advantech/BroadWin WebAccess versions prior to 7.0 Description The issue allows remote attackers to execute arbitrary SQL commands via crafted string input, potentially leading to unauthorized data access or modification. Recommendations For...

PT-2012-2435

Name of the Vulnerable Software and Affected Versions Advantech/BroadWin WebAccess versions prior to 7.0 Description The issue allows remote attackers to execute arbitrary SQL commands via crafted string input, potentially leading to unauthorized data access or modification. Recommendations For...

PT-2011-4394

Name of the Vulnerable Software and Affected Versions ATCOM Netvolution version 2.5.8 Description The issue allows remote attackers to execute arbitrary SQL commands via the Referer HTTP header, potentially leading to unauthorized data access or modification. Recommendations For ATCOM Netvolution...

CVE-2010-2787

api.php in MediaWiki before 1.15.5 does not prevent use of public caching headers for private data, which allows remote attackers to bypass intended access restrictions and obtain sensitive information by retrieving documents from an HTTP proxy cache that has been used by a victim...

SA00001-2010

Vulnerability Report 1. Affected software OrangeHRM 2.5.0.4 Prior versions may also be affected. "OrangeHRM is an Open Source HRM system. It provides an ideal solution for small and medium sized enterprises looking for an inexpensive way to effectively manage and develop their human resources."...

Mozilla Firefox 3.6 window.location对象非授权数据访问漏洞

CVE ID: CVE-2010-0170 Firefox是一款流行的开源WEB浏览器。 由于开发了新的机制来强制窗口与帧之间的同源策略，Firefox 3.6的浏览器引擎将window.location对象更改为正常的可覆盖JavaScript对象。但一些插件也使用这个对象判断页面来源以实施访问限制，因此恶意网页可以通过覆盖这个对象欺骗插件允许到其他站点或本地文件系统上数据的访问。 Mozilla Firefox 3.6 厂商补丁： Mozilla ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.mozilla.org/...

cityadmin - links.php Blind SQL Injection

cityadmin - links.php Blind SQL Injection cityadmin links.php Blind Sql Injection Vulnerability ============================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : cityadmin .:. Download...

Adobe RoboHelp Server SQL Injection (CVE-2008-2991)

Adobe RoboHelp Server is a server-based Help solution that provides real-time end-user feedback on Help and knowledge bases. It gathers and logs data about what questions users ask, while searching content and how users navigate through topics. There exists an SQL injection vulnerability in Adobe...

HP-UX PHSS_38783 : HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code, Unauthorized Access to Data (HPSBMA02406 SSRT080100 rev.2)

s700800 11.X OV NNM7.53 IA-64 Intermediate Patch 21 : Potential security vulnerabilities have been identified with HP OpenView Network Node Manager OV NNM. The vulnerabilities could be exploited remotely to allow execution of arbitrary code or unauthorized access to data. %NASLMINLEVEL 70300 C...

HP-UX Update for Veritas VxFS 3.3/3.5 HPSBUX01218

Check for the Version of Veritas VxFS 3.3/3.5 OpenVAS Vulnerability Test HP-UX Update for Veritas VxFS 3.3/3.5 HPSBUX01218 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

scpig-sql.txt

SoftComplex PHP Image Gallery ctg Remote SQL Injection Velnerability Author: Hussin X Home : www.IQ-TY.com & www.TrYaG.cc MaiL : [email protected] script : http://www.softcomplex.com/products/phpimagegallery/demo2/ ExploiT & demo...

Flash Player vulnerable in handling cross-domain policy files

Overview Adobe Flash Player contains a vulnerability caused by improper handling of cross-domain policy files. Adobe Flash Player is a player for the Flash media format and enables frame-based animations with sound to be viewed within a web browser. According to Adobe's "About allowing cross-doma...

CaLogic Calendars 1.2.2 (langsel) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================================== CaLogic Calendars 1.2.2 langsel Remote SQL Injection Vulnerability ====================================================================...

XOOPS Module wfdownloads (cid) Remote SQL Injection Vulnerability

No description provided by source. XOOPS module wfdownloads SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAiL : [email protected] DORK 1 : allinurl: "modules/wfdownloads/viewcat.php?cid" DORK 2 : allinurl: "modules/wfdownloads" EXPLOIT :...

Chatwm 1.0 - SelGruFra.asp SQL Injection

Chatwm 1.0 - SelGruFra.asp SQL Injection source: https://www.securityfocus.com/bid/21732/info Chatwm is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an...