IT-Grundschutz M4.017: Sperren und Löschen nicht benötigter Accounts und Terminals

IT-Grundschutz M4.017: Sperren und Löschen nicht benötigter Accounts und Terminals. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94184 Diese Prüfung bezieht sich auf...

REZERVI Belegungsplan und Gästedatenbank 'include/mail.inc.php' Remote File Include Vulnerability

UTILO REZERVI Belegungsplan und Gästedatenbank is prone to a remote file-include vulnerability because it fails to properly sanitize user- supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the...

Checks XP Internetcommunication of some Programs - Windows

The script Checks XP Internetcommunication of some Programs: Internet Explorer Windows Media Player Windows Messenger Windows Zeitdienst Hilfe- und Supportcenter Windows Update Gerätemanager Windows Aktivierung und Registrierung Aktualisierung der Stammzertifikate Ereignisanzeige Webdienst...

Unfixed XSS vulnerability at www.fuss-und-schuh.co.jp

Security researcher trueliarx, has submitted on 18/04/2010 a cross-site-scripting XSS vulnerability affecting www.fuss-und-schuh.co.jp, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 22/12/2011. It is...

IT-Grundschutz M4.017: Sperren und Löschen nicht benötigter Accounts und Terminals

IT-Grundschutz M4.017: Sperren und Löschen nicht benötigter Accounts und Terminals. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94184 Diese Prüfung bezieht sich auf...

Date & Sex Vor und Rückwärts Auktions System 2 - Blind SQL Injection

----------------------------Information------------------------------------------------ +Name : Date & Sex Vor und Rückwärts Auktions System 1 ------------...

Unfixed XSS vulnerability at www.paare-und-beratung.de

Security researcher Blitzkrieg, has submitted on 03/12/2009 a cross-site-scripting XSS vulnerability affecting www.paare-und-beratung.de, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/07/2010. It is...

Unfixed XSS vulnerability at www.essen-und-trinken.de

Security researcher Viper.aT, has submitted on 10/04/2008 a cross-site-scripting XSS vulnerability affecting www.essen-und-trinken.de, which at the time of submission ranked 44553 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/04/2008. It i...

Unfixed XSS vulnerability at www.pso-und-haut.de

Security researcher BackDoor, has submitted on 04/11/2007 a cross-site-scripting XSS vulnerability affecting www.pso-und-haut.de, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is current...

CVE-2006-4376

Multiple cross-site scripting XSS vulnerabilities in Guder und Koch Netzwerktechnik Eichhorn Portal allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly including the 1 profilnr and 2 sprache parameters in the main portion of the portal, the 3 suchstring...

CVE-2006-4377

Multiple SQL injection vulnerabilities in Guder und Koch Netzwerktechnik Eichhorn Portal allow remote attackers to execute arbitrary SQL commands via unspecified vectors, possibly including the 1 profilnr and 2 sprache parameters in the main portion of the portal, the 3 suchstring field in suchFo...

CVE-2006-4376

CVE-2006-4376 involves multiple XSS vulnerabilities in the Guder und Koch Netzwerktechnik Eichhorn Portal. Remote attackers can inject arbitrary web script or HTML via unspecified vectors, potentially using parameters such as profil_nr, sprache, suchstring (in suchForm), GaleryKey and Breadcrumbs...

CVE-2006-4376

Multiple cross-site scripting XSS vulnerabilities in Guder und Koch Netzwerktechnik Eichhorn Portal allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly including the 1 profilnr and 2 sprache parameters in the main portion of the portal, the 3 suchstring...

CVE-2006-4377

Multiple SQL injection vulnerabilities in Guder und Koch Netzwerktechnik Eichhorn Portal allow remote attackers to execute arbitrary SQL commands via unspecified vectors, possibly including the 1 profilnr and 2 sprache parameters in the main portion of the portal, the 3 suchstring field in suchFo...

CVE-2006-4377

CVE-2006-4377 describes multiple SQL injection vulnerabilities in the Guder und Koch Netzwerktechnik Eichhorn Portal. The flaws permit remote attackers to execute arbitrary SQL commands through unspecified vectors, potentially including parameters such as profil_nr, sprache, suchstring, GaleryKey...

CVE-2006-4376: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Guder und Koch Netzwerktechnik Eichhorn Portal allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly including the 1 profilnr and 2 sprache parameters in the main portion of the portal, the 3 suchstring...

CVE-2006-4377: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Guder und Koch Netzwerktechnik Eichhorn Portal allow remote attackers to execute arbitrary SQL commands via unspecified vectors, possibly including the 1 profilnr and 2 sprache parameters in the main portion of the portal, the 3 suchstring field in suchFo...

Tons of SQL-injections and XSS in Eichhorn Portal and vendor page

Hi list. There are lots of SQL injections and XSS in the 'Eichhorn Portal' by 'Guder und Koch Netzwerktechnik' and their own website. Input passed to multiple parameters in different PHP-files isn't properly sanitised before being returned to the user. This can be exploited to execute arbitrary...