Lucene search
K

27 matches found

Prion
Prion
added 2023/12/15 8:15 a.m.7 views

Information disclosure

SmartStar Software CWS is a web-base integration platform, it has a vulnerability of using a hard-coded for a specific account with low privilege. An unauthenticated remote attacker can exploit this vulnerability to run partial processes and obtain partial information, but can't disrupt service o...

6.4CVSS7.2AI score0.00194EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/12/15 7:46 a.m.15 views

CVE-2023-48375 SmartStar Software CWS Web-Base - Broken Access Control

SmartStar Software CWS is a web-based integration platform, it has a vulnerability of missing authorization and users are able to access data or perform actions that they should not be allowed to perform via commands. An authenticated with normal user privilege can execute administrator privilege...

8.8CVSS8.9AI score0.00152EPSS
Exploits0References1
CVE
CVE
added 2023/12/15 7:39 a.m.23 views

CVE-2023-48374

The CVE-2023-48374 entry pertains to SmartStar Software CWS, a web-based integration platform. The vulnerability is described as using a hard-coded credential for a specific low-privilege account, enabling an unauthenticated remote attacker to run partial processes and view partial information. T...

6.5CVSS6.5AI score0.00194EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/12/15 7:39 a.m.16 views

CVE-2023-48374 SmartStar Software CWS Web-Base - Use of Hard-coded Credentials

SmartStar Software CWS is a web-base integration platform, it has a vulnerability of using a hard-coded for a specific account with low privilege. An unauthenticated remote attacker can exploit this vulnerability to run partial processes and obtain partial information, but can't disrupt service o...

6.5CVSS6.7AI score0.00194EPSS
Exploits0References1
0day.today
0day.today
added 2011/05/20 12:0 a.m.15 views

Ultimate PHP Board 2.2.7 Broken Authentication and Session Management

Exploit for php platform in category web applications Exploit Title : Ultimate PHP Board 2.2.7 "Broken Authentication and Session Management" Date : 2011.05.17 Author : i2sec - Gi bum Hong Software Link : http://sourceforge.net/projects/textmb/files/UPB/UPB%202.2.7/ Version : 2.2.7 Tested on :...

7.1AI score
Exploits0
OpenVAS
OpenVAS
added 2010/05/07 12:0 a.m.18 views

Mandriva Update for mds MDVA-2010:142 (mds)

Check for the Version of mds OpenVAS Vulnerability Test Mandriva Update for mds MDVA-2010:142 mds Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

0.1AI score
Exploits0References2
OpenVAS
OpenVAS
added 2010/02/15 12:0 a.m.36 views

Mandriva Update for mmc-web-base MDVA-2010:051 (mmc-web-base)

Check for the Version of mmc-web-base OpenVAS Vulnerability Test Mandriva Update for mmc-web-base MDVA-2010:051 mmc-web-base Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

10CVSS0.4AI score0.07108EPSS
Exploits2References2
OpenVAS
OpenVAS
added 2010/01/29 12:0 a.m.33 views

Mandriva Update for mmc MDVA-2010:044 (mmc)

Check for the Version of mmc OpenVAS Vulnerability Test Mandriva Update for mmc MDVA-2010:044 mmc Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

6CVSS5.2AI score0.00245EPSS
Exploits3References2
NVD
NVD
added 2009/05/22 11:52 a.m.7 views

CVE-2009-1751

SQL injection vulnerability in listlist.php in Realty Webware Technologies Web-Base 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS8.4AI score0.00322EPSS
Exploits1References4
Prion
Prion
added 2009/05/22 11:52 a.m.11 views

Sql injection

SQL injection vulnerability in listlist.php in Realty Webware Technologies Web-Base 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS9.1AI score0.00322EPSS
Exploits1References4Affected Software1
CVE
CVE
added 2009/05/21 6:0 p.m.39 views

CVE-2009-1751

CVE-2009-1751 describes an SQL injection in Realty Webware Technologies Web-Base 1.0, exploitable via the id parameter in list_list.php. The vulnerability allows remote attackers to craft input that alters SQL queries, with a CVSSv2 base score of 7.5 (HIGH) and network attack vector with no authe...

7.5CVSS8.7AI score0.00322EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2009/05/21 6:0 p.m.13 views

CVE-2009-1751

SQL injection vulnerability in listlist.php in Realty Webware Technologies Web-Base 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

8.4AI score0.00322EPSS
Exploits1References4
seebug.org
seebug.org
added 2009/05/21 12:0 a.m.17 views

Realty Web-Base 1.0 (list_list.php id) SQL Injection Vulnerability

No description provided by source. --------------------------------------------------------------- ------------------------------------------------------------ Realty Web-Base v1.0 listlist.php id SQL Injection Vulnerability --------------------------------------------------------------- Founder ...

7.1AI score
Exploits0
Packet Storm
Packet Storm
added 2009/05/21 12:0 a.m.26 views

Realty Web-Base 1.0 SQL Injection

--------------------------------------------------------------- ------------------------------------------------------------ Realty Web-Base v1.0 listlist.php id SQL Injection Vulnerability --------------------------------------------------------------- Founder : ThE g0bL!N Home:WwW.h4ckF0u.CoM...

0.5AI score
Exploits0
0day.today
0day.today
added 2009/05/20 12:0 a.m.20 views

Realty Web-Base 1.0 (list_list.php id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== Realty Web-Base 1.0 listlist.php id SQL Injection Vulnerability ==================================================================...

7.1AI score
Exploits0
exploitpack
exploitpack
added 2009/05/20 12:0 a.m.15 views

Realty Web-Base 1.0 - list_list.php?id SQL Injection

Realty Web-Base 1.0 - listlist.php?id SQL Injection --------------------------------------------------------------- ------------------------------------------------------------ Realty Web-Base v1.0 listlist.php id SQL Injection Vulnerability...

0.4AI score
Exploits0
Exploit DB
Exploit DB
added 2009/05/20 12:0 a.m.45 views

Realty Web-Base 1.0 - 'list_list.php?id' SQL Injection

--------------------------------------------------------------- ------------------------------------------------------------ Realty Web-Base v1.0 listlist.php id SQL Injection Vulnerability --------------------------------------------------------------- Founder : ThE g0bL!N Home:WwW.h4ckF0u.CoM...

7.4AI score
Exploits0
NVD
NVD
added 2009/05/18 12:0 p.m.14 views

CVE-2009-1658

Multiple SQL injection vulnerabilities in admin/admin.php in Realty Webware Technologies Realty Web-Base 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 user username and 2 password parameters. NOTE: some of these details are obtained from third party information...

7.5CVSS8.7AI score0.00202EPSS
Exploits1References5
CVE
CVE
added 2009/05/17 4:0 p.m.42 views

CVE-2009-1658

CVE-2009-1658 corresponds to multiple SQL injection vulnerabilities in Realty Web-Base 1.0, specifically in the admin/admin.php module. The root cause, as described across the provided records, is improper handling of user input (parameters: username and password), enabling remote attackers to co...

7.5CVSS8.9AI score0.00202EPSS
Exploits1References5Affected Software1
OpenVAS
OpenVAS
added 2009/05/10 12:0 a.m.13 views

Realty Web-Base Detection

Realty Web-Base, a content management and customer communication suite is running at this host. OpenVAS Vulnerability Test $Id: realtywebbasedetect.nasl 5739 2017-03-27 14:48:05Z cfi $ Realty Web-Base Detection Authors Michael Meyer Copyright: Copyright c 2009 Greenbone Networks GmbH This program...

0.1AI score
Exploits0References1
Rows per page
Query Builder