27 matches found
Information disclosure
SmartStar Software CWS is a web-base integration platform, it has a vulnerability of using a hard-coded for a specific account with low privilege. An unauthenticated remote attacker can exploit this vulnerability to run partial processes and obtain partial information, but can't disrupt service o...
CVE-2023-48375 SmartStar Software CWS Web-Base - Broken Access Control
SmartStar Software CWS is a web-based integration platform, it has a vulnerability of missing authorization and users are able to access data or perform actions that they should not be allowed to perform via commands. An authenticated with normal user privilege can execute administrator privilege...
CVE-2023-48374
The CVE-2023-48374 entry pertains to SmartStar Software CWS, a web-based integration platform. The vulnerability is described as using a hard-coded credential for a specific low-privilege account, enabling an unauthenticated remote attacker to run partial processes and view partial information. T...
CVE-2023-48374 SmartStar Software CWS Web-Base - Use of Hard-coded Credentials
SmartStar Software CWS is a web-base integration platform, it has a vulnerability of using a hard-coded for a specific account with low privilege. An unauthenticated remote attacker can exploit this vulnerability to run partial processes and obtain partial information, but can't disrupt service o...
Ultimate PHP Board 2.2.7 Broken Authentication and Session Management
Exploit for php platform in category web applications Exploit Title : Ultimate PHP Board 2.2.7 "Broken Authentication and Session Management" Date : 2011.05.17 Author : i2sec - Gi bum Hong Software Link : http://sourceforge.net/projects/textmb/files/UPB/UPB%202.2.7/ Version : 2.2.7 Tested on :...
Mandriva Update for mds MDVA-2010:142 (mds)
Check for the Version of mds OpenVAS Vulnerability Test Mandriva Update for mds MDVA-2010:142 mds Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...
Mandriva Update for mmc-web-base MDVA-2010:051 (mmc-web-base)
Check for the Version of mmc-web-base OpenVAS Vulnerability Test Mandriva Update for mmc-web-base MDVA-2010:051 mmc-web-base Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...
Mandriva Update for mmc MDVA-2010:044 (mmc)
Check for the Version of mmc OpenVAS Vulnerability Test Mandriva Update for mmc MDVA-2010:044 mmc Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...
CVE-2009-1751
SQL injection vulnerability in listlist.php in Realty Webware Technologies Web-Base 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in listlist.php in Realty Webware Technologies Web-Base 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2009-1751
CVE-2009-1751 describes an SQL injection in Realty Webware Technologies Web-Base 1.0, exploitable via the id parameter in list_list.php. The vulnerability allows remote attackers to craft input that alters SQL queries, with a CVSSv2 base score of 7.5 (HIGH) and network attack vector with no authe...
CVE-2009-1751
SQL injection vulnerability in listlist.php in Realty Webware Technologies Web-Base 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...
Realty Web-Base 1.0 (list_list.php id) SQL Injection Vulnerability
No description provided by source. --------------------------------------------------------------- ------------------------------------------------------------ Realty Web-Base v1.0 listlist.php id SQL Injection Vulnerability --------------------------------------------------------------- Founder ...
Realty Web-Base 1.0 SQL Injection
--------------------------------------------------------------- ------------------------------------------------------------ Realty Web-Base v1.0 listlist.php id SQL Injection Vulnerability --------------------------------------------------------------- Founder : ThE g0bL!N Home:WwW.h4ckF0u.CoM...
Realty Web-Base 1.0 (list_list.php id) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================== Realty Web-Base 1.0 listlist.php id SQL Injection Vulnerability ==================================================================...
Realty Web-Base 1.0 - list_list.php?id SQL Injection
Realty Web-Base 1.0 - listlist.php?id SQL Injection --------------------------------------------------------------- ------------------------------------------------------------ Realty Web-Base v1.0 listlist.php id SQL Injection Vulnerability...
Realty Web-Base 1.0 - 'list_list.php?id' SQL Injection
--------------------------------------------------------------- ------------------------------------------------------------ Realty Web-Base v1.0 listlist.php id SQL Injection Vulnerability --------------------------------------------------------------- Founder : ThE g0bL!N Home:WwW.h4ckF0u.CoM...
CVE-2009-1658
Multiple SQL injection vulnerabilities in admin/admin.php in Realty Webware Technologies Realty Web-Base 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 user username and 2 password parameters. NOTE: some of these details are obtained from third party information...
CVE-2009-1658
CVE-2009-1658 corresponds to multiple SQL injection vulnerabilities in Realty Web-Base 1.0, specifically in the admin/admin.php module. The root cause, as described across the provided records, is improper handling of user input (parameters: username and password), enabling remote attackers to co...
Realty Web-Base Detection
Realty Web-Base, a content management and customer communication suite is running at this host. OpenVAS Vulnerability Test $Id: realtywebbasedetect.nasl 5739 2017-03-27 14:48:05Z cfi $ Realty Web-Base Detection Authors Michael Meyer Copyright: Copyright c 2009 Greenbone Networks GmbH This program...