Endian UTM Firewall 2.4.x / 2.5.0 CSRF / XSS

Exploit for php platform in category web applications Title: ====== Endian UTM Firewall v2.4.x & v2.5.0 - Multiple Web Vulnerabilities Introduction: ============= Einfach, schnell und zukunftssicher! Die ideale Lösung, um Ihre Filialen und industriellen Zweigstellen rund um den Globus zu schützen...

Endian UTM Firewall v2.5.0 - Multiple Web Vulnerabilities

Document Title: =============== Endian UTM Firewall v2.5.0 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=228 Release Date: ============= 2012-03-01 Vulnerability Laboratory ID VL-ID: ==================================== 2...

Endian UTM Firewall v2.5.0 - Multiple Web Vulnerabilities

Document Title: =============== Endian UTM Firewall v2.5.0 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=228 Release Date: ============= 2012-03-01 Vulnerability Laboratory ID VL-ID: ==================================== 2...

Endian UTM Firewall 2.4.x Cross Site Scripting

Title: ====== Endian UTM Firewall v2.4.x - Cross Site Vulnerabilities Date: ===== 2012-02-18 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=436 VL-ID: ===== 436 Introduction: ============= The Endian Firewall is an open source GNU/Linux distribution that specializes on...

Pandora Fms 4.0.1 - Local File Inclusion

Pandora Fms 4.0.1 - Local File Inclusion Title: ====== Pandora FMS v4.0.1 - Local File Include Vulnerability Date: ===== 2012-02-17 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=435 VL-ID: ===== 435 Introduction: ============= Pandora FMS is a monitoring Open Source...

Endian UTM Firewall v2.4.x - Cross Site Vulnerabilities

Document Title: =============== Endian UTM Firewall v2.4.x - Cross Site Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=436 Release Date: ============= 2012-02-17 Vulnerability Laboratory ID VL-ID: ==================================== 436...

Endian UTM Firewall v2.4.x - Cross Site Vulnerabilities

Document Title: =============== Endian UTM Firewall v2.4.x - Cross Site Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=436 Release Date: ============= 2012-02-17 Vulnerability Laboratory ID VL-ID: ==================================== 436...

Cyberoam Central Console 2.00.2 - Remote File Inclusion

Title: ====== Cyberoam Central Console v2.00.2 - File Include Vulnerability Date: ===== 2012-02-08 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=405 VL-ID: ===== 405 Introduction: ============= Cyberoam Central Console CCC appliances offer the flexibility of hardware...

Cyberoam Central Console 2.00.2 Local File Inclusion

Title: ====== Cyberoam Central Console v2.00.2 - File Include Vulnerability Date: ===== 2012-02-08 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=405 VL-ID: ===== 405 Introduction: ============= Cyberoam Central Console CCC appliances offer the flexibility of hardware...

Fortigate UTM WAF Appliance - Multiple Vulnerabilities

Document Title: =============== Fortigate UTM WAF Appliance - Multiple Vulnerabilities References Source: ==================== http://vulnerability-lab.com/getcontent.php?id=144 http://www.cnnvd.org.cn/vulnerability/show/cvid/2012010446 ID: CNNVD-201201-446...

Fortigate UTM WAF Appliance - Multiple Vulnerabilities

Document Title: =============== Fortigate UTM WAF Appliance - Multiple Vulnerabilities References Source: ==================== http://vulnerability-lab.com/getcontent.php?id=144 http://www.cnnvd.org.cn/vulnerability/show/cvid/2012010446 ID: CNNVD-201201-446...

Syneto UTM WAF v1.4.2 - Multiple Web Vulnerabilities

Document Title: =============== Syneto UTM WAF v1.4.2 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=373 Release Date: ============= 2012-01-20 Vulnerability Laboratory ID VL-ID: ==================================== 373...

Syneto UTM WAF v1.4.2 - Multiple Web Vulnerabilities

Document Title: =============== Syneto UTM WAF v1.4.2 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=373 Release Date: ============= 2012-01-20 Vulnerability Laboratory ID VL-ID: ==================================== 373...

Syneto UTM WAF 1.4.2 Cross Site Scripting

Title: ====== Syneto UTM WAF v1.4.2 - Multiple Web Vulnerabilities Date: ===== 2012-01-20 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=373 VL-ID: ===== 373 Introduction: ============= The Syneto UTM Unified Threat Management is a security appliance that performs...

CVE-2011-5050

SQL injection vulnerability in corporate/Controller in Elitecore Technologies Cyberoam UTM before 10.01.2 build 059 allows remote authenticated administrators to execute arbitrary SQL commands via the tableid parameter. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in corporate/Controller in Elitecore Technologies Cyberoam UTM before 10.01.2 build 059 allows remote authenticated administrators to execute arbitrary SQL commands via the tableid parameter. NOTE: some of these details are obtained from third party information...

CVE-2011-5050

SQL injection vulnerability in corporate/Controller in Elitecore Technologies Cyberoam UTM before 10.01.2 build 059 allows remote authenticated administrators to execute arbitrary SQL commands via the tableid parameter. NOTE: some of these details are obtained from third party information...

CVE-2011-5050

An active CVE describes an SQL injection in Elitecore Technologies’ Cyberoam UTM (corporate/Controller) prior to version 10.01.2 build 059. The vulnerability allows remote authenticated administrators to inject arbitrary SQL via the tableid parameter, enabling potential data exposure or modificat...

CVE-2011-5050: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in corporate/Controller in Elitecore Technologies Cyberoam UTM before 10.01.2 build 059 allows remote authenticated administrators to execute arbitrary SQL commands via the tableid parameter. NOTE: some of these details are obtained from third party information...

Cyberoam UTM Application CR300i / CR500i v10 SQL Injection

Title: ====== Cyberoam UTM Appliance - SQL Injection Vulnerability Date: ===== 2011-12-19 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=60 VL-ID: ===== 60 Introduction: ============= Small and medium enterprises are as much at risk as large enterprises from the target...