CVE-2012-3000

Summary: CVE-2012-3000 is an SQL injection vulnerability affecting multiple BIG-IP components (APM WebGUI, AVR WebGUI, and related WebGUIs) on BIG-IP LTM, GTM, ASM, Link Controller, PSM, Edge Gateway, Analytics, WebAccelerator, and WOM up to 11.2.x with specific HF3 fixes. Affected path/trigger: ...

CVE-2012-3000: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in sam/admin/reports/php/saveSettings.php in the 1 APM WebGUI in F5 BIG-IP LTM, GTM, ASM, Link Controller, PSM, APM, Edge Gateway, and Analytics and 2 AVR WebGUI in WebAccelerator and WOM 11.2.x before 11.2.0-HF3 and 11.2.x before 11.2.1-HF3 allow remote...

PT-2014-2261

Name of the Vulnerable Software and Affected Versions F5 BIG-IP LTM, GTM, ASM, Link Controller, PSM, APM, Edge Gateway, and Analytics versions prior to 11.2.0-HF3 F5 WebAccelerator and WOM versions prior to 11.2.0-HF3 and prior to 11.2.1-HF3 Description The issue allows remote authenticated users...

ZeroShell 'cgi-bin/kerbynet' - Local File Disclosure

Introduction to the PoC : ====================================================================== In this distribution, the managment website is a binary file named "kerbynet" interpreted in cgi-bin directory here : /cdrom/usr/local/apache2/cgi-bin/kerbynet So all url look like this :...

ZeroShell 2.0RC2 File Disclosure / Command Execution

Exploit Title: ZeroShell = 2.0RC2 Local file disclosure and Remote Command Execution Date: 13/08/2013 Author: Yann CAM @ Synetis - ASafety Vendor or Software Link: www.zeroshell.org - www.zeroshell.org/download/ Version: 2.0RC2 Category: Local File disclosure and Remote Command Execution Google...

TP-LINK TL-WR340G Denial Of Service

=== intro === TP-LINK TL-WR340G is a SOHO router with integrated IEEE 802.11b/g AP. Now it's marked End-of-Life. Transmitting crafted frames in proximity of working router cause device to malfunction. Wireless communication stops, existing clients don't receive frames from AP except beacons , new...

CVE-2009-4877

Multiple cross-site request forgery CSRF vulnerabilities in WebGUI before 7.7.14 allow remote attackers to hijack the authentication of users for unspecified requests via unknown vectors...

CVE-2009-4877

Multiple cross-site request forgery CSRF vulnerabilities in WebGUI before 7.7.14 allow remote attackers to hijack the authentication of users for unspecified requests via unknown vectors...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in WebGUI before 7.7.14 allow remote attackers to hijack the authentication of users for unspecified requests via unknown vectors...

CVE-2009-4877

CVE-2009-4877 describes multiple CSRF weaknesses in WebGUI prior to version 7.7.14 that enable remote attackers to hijack user authentication for unspecified requests via unknown vectors. The affected product is WebGUI (before 7.7.14); the vulnerability’s exact exploit method, affected components...

CVE-2009-4877

Multiple cross-site request forgery CSRF vulnerabilities in WebGUI before 7.7.14 allow remote attackers to hijack the authentication of users for unspecified requests via unknown vectors...

CVE-2009-4877: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in WebGUI before 7.7.14 allow remote attackers to hijack the authentication of users for unspecified requests via unknown vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the WebGUI in FreeNAS before 0.7RC1 allows remote attackers to hijack the authentication of users for unspecified requests via unknown vectors...

CVE-2009-2738

CVE-2009-2738 is a CSRF vulnerability affecting FreeNAS WebGUI prior to version 0.7RC1. The issue allows an attacker to hijack a user’s authenticated session and perform unspecified actions via forged requests, when the user is logged into the WebGUI, due to CSRF in the web interface. Public docu...

CVE-2009-2738

Cross-site request forgery CSRF vulnerability in the WebGUI in FreeNAS before 0.7RC1 allows remote attackers to hijack the authentication of users for unspecified requests via unknown vectors...

CVE-2009-2738: Improper Neutralization of Input During Web Page Generation

Cross-site request forgery CSRF vulnerability in the WebGUI in FreeNAS before 0.7RC1 allows remote attackers to hijack the authentication of users for unspecified requests via unknown vectors...

AWStats 6.4 - 'AWStats.pl' Multiple Full Path Disclosures

source: https://www.securityfocus.com/bid/34159/info AWStats is prone to a path-disclosure vulnerability. Exploiting this issue can allow an attacker to access sensitive data that may be used to launch further attacks against a vulnerable computer. The following are vulnerable: AWStats 6.5 build...

AWStats 6.4 - AWStats.pl Multiple Full Path Disclosures

AWStats 6.4 - AWStats.pl Multiple Full Path Disclosures source: https://www.securityfocus.com/bid/34159/info AWStats is prone to a path-disclosure vulnerability. Exploiting this issue can allow an attacker to access sensitive data that may be used to launch further attacks against a vulnerable...

AWStats < 6.6 'awstats.pl' Multiple Path Disclosure Vulnerability - Active Check

AWStats is prone to a path-disclosure vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:awstats:awstats";...

CVE-2008-6402

CVE-2008-6402 describes a PHP remote file inclusion vulnerability in the Sofi WebGui package, affecting version 0.6.3 PRE and earlier. The flaw resides in hu/modules/reg-new/modstart.php, where an attacker can supply a URL in the mod_dir parameter to cause arbitrary PHP code execution on the serv...