PT-2018-3326 · Abb · Abb Esoms

Name of the Vulnerable Software and Affected Versions: ABB eSOMS version 6.0.2 Description: The issue is related to the incorrect operation of the authentication mechanism in ABB eSOMS. This can allow a remote attacker to gain unauthorized access to the system if LDAP is configured for anonymous...

Code injection

The Web Configuration Utility in Meinberg LANTIME devices with firmware before 6.24.004 allows remote authenticated users with certain privileges to read arbitrary files via 1 the ntpclientcounterlogfile parameter to cgi-bin/mainv2 or 2 vectors involving curl support of the "file" schema in the...

Absolute News Manager .NET 5.1 pages/default.aspx template Variable Remote File Access

No description provided by source. source: http://www.securityfocus.com/bid/26692/info Absolute News Manager .NET is prone to multiple remote vulnerabilities, including multiple cross-site scripting, SQL-injection, and information-disclosure issues. Attackers can exploit these issues to steal...

Being the top academic system in the latest sql injection vulnerability fix-bug warning-the black bar safety net

You also again for the exam hanging branches and trouble? you also then for College how to sister phone and tangled? -, do you want to quickly find a school of nice girl?, then please see below 1. Classroom query at sql injection, as shown in Figure ! 1 union select NULL,owner from alltables brok...

Kaspersky Anti-Spam Control Center Web Config aslic_status.cgi Directory Listing

The version of the Kaspersky Anti-Spam Control Center installed on the remote host is affected by an information disclosure vulnerability due to a failure to require authentication for access to directories under the service's document root. An unauthenticated, remote attacker can exploit this to...

CVE-2004-2323

DotNetNuke formerly IBuySpy Workshop 1.0.6 through 1.0.10d allows remote attackers to obtain sensitive information, including the SQL server username and password, via a GET request for source or configuration files such as Web.config...

CVE-2000-0945

CVE-2000-0945 affects Cisco Catalyst 3500 XL devices where the web configuration interface exposes an HTTP path /exec/ and allows remote command execution when the enable password is not set. Provided connected documents describe that an unauthenticated user can trigger arbitrary commands by requ...