MyBulletinBoard RC4 index.php Username Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/14553/info MyBulletinBoard is prone to multiple SQL injection vulnerability. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful...

Advantech WebAccess SCADA webvact.ocx UserName Buffer Overflow (CVE-2014-0770)

A stack buffer overflow has been reported in Advantech's WebAccess SCADA software. This is due to insufficient input validation on the UserName parameter of the webvact.ocx ActiveX control, a part of the WebAccess Client. Successful exploitation could lead to code execution in the context of the...

Stack overflow

Stack-based buffer overflow in Advantech WebAccess before 7.2 allows remote attackers to execute arbitrary code via a long UserName parameter...

CVE-2014-0770 Advantech WebAccess Stack-based Buffer Overflow

By providing an overly long string to the UserName parameter, an attacker may be able to overflow the static stack buffer. The attacker may then execute code on the target device remotely...

CVE-2014-0770: Stack-based Buffer Overflow

By providing an overly long string to the UserName parameter, an attacker may be able to overflow the static stack buffer. The attacker may then execute code on the target device remotely...

PT-2014-3832

Name of the Vulnerable Software and Affected Versions Advantech WebAccess versions prior to 7.2 Description The issue is related to a stack-based buffer overflow that allows remote attackers to execute arbitrary code. This is achieved by providing a long UserName parameter. Recommendations For...

PT-2014-4796

Name of the Vulnerable Software and Affected Versions McAfee Asset Manager version 6.6 Description A SQL injection issue exists, allowing remote authenticated users to execute arbitrary SQL commands. This is achieved via the username parameter of an audit report in the jsp/reports/ReportsAudit.js...

CVE-2013-2498: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the login page in flexycms/modules/user/usermanager.php in SimpleHRM 2.3, 2.2, and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter to index.php/user/setLogin...

PT-2014-2588

Name of the Vulnerable Software and Affected Versions SimpleHRM versions 2.3, 2.2, and earlier Description The issue allows remote attackers to execute arbitrary SQL commands via the username parameter to "index.php/user/setLogin". This is a SQL injection vulnerability in the login page,...

Cross site scripting

Cross-site scripting XSS vulnerability in login.esp in the Web Management Interface in Media5 Mediatrix 4402 VoIP Gateway with firmware Dgw 1.1.13.186 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter...

CVE-2014-1612: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in login.esp in the Web Management Interface in Media5 Mediatrix 4402 VoIP Gateway with firmware Dgw 1.1.13.186 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter...

CVE-2013-5667

The Thecus NAS server N8800 with firmware 5.03.01 allows remote attackers to execute arbitrary commands via a getuserid action with shell metacharacters in the username parameter...

PT-2014-2942

Name of the Vulnerable Software and Affected Versions Thecus NAS server N8800 version 5.03.01 Description The issue allows remote attackers to execute arbitrary commands. This is achieved through a get userid action that contains shell metacharacters in the username parameter. Recommendations For...

CVE-2013-5667: Improper Neutralization of Special Elements used in an OS Command

The Thecus NAS server N8800 with firmware 5.03.01 allows remote attackers to execute arbitrary commands via a getuserid action with shell metacharacters in the username parameter...

CVE-2013-7277: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Andy's PHP Knowledgebase Aphpkb before 0.95.8 allow remote attackers to inject arbitrary web script or HTML via the 1 HTTP Referer header to saa.php, 2 username parameter to login.php, or 3 keywordlist parameter to keysearch.php...

CVE-2013-6882

Multiple cross-site scripting XSS vulnerabilities in CRU Ditto Forensic FieldStation with firmware 2013Oct15a and earlier allow 1 remote attackers to inject arbitrary web script or HTML via the username parameter in a login or 2 remote authenticated users to inject arbitrary web script or HTML vi...

CVE-2013-6882: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in CRU Ditto Forensic FieldStation with firmware 2013Oct15a and earlier allow 1 remote attackers to inject arbitrary web script or HTML via the username parameter in a login or 2 remote authenticated users to inject arbitrary web script or HTML vi...

PT-2013-6166

Name of the Vulnerable Software and Affected Versions CRU Ditto Forensic FieldStation versions 2013Oct15a and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via the username parameter in a login. Additionally, remote authenticated users can inject...

CVE-2013-5108: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the xn function in RockMongo 1.1.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 db parameter on the login page or 2 username parameter in a login.index action to index.php and other unspecified parameters...

Beetel Connection Manager NetConfig.ini Buffer Overflow Vulnerability

This Metasploit module exploits a stack-based buffer overflow on Beetel Connection Manager. The vulnerability exists in the parsing of the UserName parameter in the NetConfig.ini file. The module has been tested successfully on PCWBTLINDV1.0.0B04 over Windows XP SP3 and Windows 7 SP1.b. This modu...