CVE-2014-7835

webservice/upload.php in Moodle 2.6.x before 2.6.6 and 2.7.x before 2.7.3 does not ensure that a file upload is for a private or draft area, which allows remote authenticated users to upload files containing JavaScript, and consequently conduct cross-site scripting XSS attacks, by specifying the...

CVE-2014-7835

CVE-2014-7835 affects Moodle 2.6.x before 2.6.6 and 2.7.x before 2.7.3. The webservice/upload.php handler fails to ensure uploaded files are placed in a private/draft area, allowing remote authenticated users to upload JavaScript in the profile-picture area and perform cross-site scripting (XSS)....

easysite内容管理系统某简单粗暴的SQL注入

简要描述： web services是不会骗人的！ 大量gov站点采用了easysite内容管理系统。 详细说明： 1.soap注入 easysite webservice 文件： http://www.py.gov.cn/DesktopModules/CInfo/WebService/CInfoService.asmx 2.ArticleIDs参数存在SQL注入漏洞 随便找个放sqlmap里跑吧 POST /DesktopModules/CInfo/WebService/CInfoService.asmx HTTP/1.1 Host: dynamic.xmedu.gov.cn...

TRS WCM越权直接创建任意用户（无需审核）

简要描述： 任意创建用户，无需审核，直接登录。 详细说明： 1、首先我们确定一个不存在或者密码错误的用户名： 2、通过webservice调用创建用户的方法，创建一个用户： =============================== 在乌云找了找， WooYun: TRS系统任意文件下载漏洞 中只发现一个存在该方法的案例 http://wcm.xxz.gov.cn:8080/wcm/ 湘西州政府站群 漏洞证明： 成功登录新创建的用户：...

大汉版通所属部分系统文件任意文件上传漏洞

简要描述： 任意类型文件上传，可getshell。影响到jact、jsearch、JCMS相关版本，不好一一统计。 详细说明： 受影响的系统版本是WebService中存在一个receivefile操作的，一般在wsInfo服务中。 （注：不同产品不同版本代码可能会有所不同） 0x1 jsearch public String receivefileString strLoginId, String strPwd, String strKey, DataHandler handler, String filename, int iState String result = "";...

大汉版通JCMS系统SQL注射

简要描述： 大汉版通JCMS存在SQL注射漏洞，影响较高版本。 详细说明： 0x1 还是WebService。大汉版通JCMS系统较高版本（带WebService的）。 该系统WebService部分操作存在SQL注射漏洞。以wsReceive服务的wsGetWeb操作为例，wsGetWeb有4个参数： public String wsGetWebString strWebIds, String strLoginId, String strPwd, String strKey SysInit.init; this.clientIp = getClientIpAxis;...

大汉版通JIS统一身份认证系统SQL注射漏洞

简要描述： 我也拿大汉版通刷点WB吧。 大汉版通JIS统一身份认证系统存在SQL注射漏洞，可获取用户帐号密码等。 详细说明： 大汉版通JIS统一身份认证系统webservice的多个方法存在SQL注射漏洞，系统webservice路径/jis/service： 例如validateLogin方法： 例如getAppURLById方法： 漏洞证明： 用getGroupEntity操作测试： ?php / jis web service getGroupEntity metho...

IBM Rational Focal Point Login Servlet Information Disclosure (CVE-2013-5397)

An information disclosure vulnerability has been reported in IBM Rational Focal Point. The vulnerability is due to an input validation error of the file variable in com.telelogic.focalpoint.pres.controller.LoginController servlet. A remote, unauthenticated attacker could exploit this vulnerabilit...

IBM Rational Focal Point RequestAccessController Servlet Information Disclosure (CVE-2013-5398)

An information disclosure vulnerability has been reported in IBM Focal Point. The vulnerability is due to input validation error of file variable in com.telelogic.focalpoint.pres.controller.RequestAccessController servlet. A remote unauthenticated attacker could exploit this vulnerability to read...

CVE-2013-5397

Unspecified vulnerability in the Webservice Axis Gateway in IBM Rational Focal Point 6.4 before devfix1, 6.4.1.3 before devfix1, 6.5.1 before devfix1, 6.5.2 before devfix4, 6.5.2.3 before devfix9, 6.6 before devfix5, 6.6.0.1 before devfix2, and 6.6.1 allows remote attackers to bypass intended...

CVE-2013-5398

Unspecified vulnerability in the Webservice Axis Gateway in IBM Rational Focal Point 6.4 before devfix1, 6.4.1.3 before devfix1, 6.5.1 before devfix1, 6.5.2 before devfix4, 6.5.2.3 before devfix9, 6.6 before devfix5, 6.6.0.1 before devfix2, and 6.6.1 allows remote attackers to bypass intended...

Security feature bypass

Unspecified vulnerability in the Webservice Axis Gateway in IBM Rational Focal Point 6.4 before devfix1, 6.4.1.3 before devfix1, 6.5.1 before devfix1, 6.5.2 before devfix4, 6.5.2.3 before devfix9, 6.6 before devfix5, 6.6.0.1 before devfix2, and 6.6.1 allows remote attackers to bypass intended...

Security feature bypass

Unspecified vulnerability in the Webservice Axis Gateway in IBM Rational Focal Point 6.4 before devfix1, 6.4.1.3 before devfix1, 6.5.1 before devfix1, 6.5.2 before devfix4, 6.5.2.3 before devfix9, 6.6 before devfix5, 6.6.0.1 before devfix2, and 6.6.1 allows remote attackers to bypass intended...

CVE-2013-5398

CVE-2013-5398 is an information-disclosure vulnerability in IBM Rational Focal Point’s Webservice Axis Gateway. It arises from input validation of the file variable in the RequestAccessController servlet, enabling a remote, unauthenticated attacker to read configuration files of the Webservice Ax...

CVE-2013-5397

Unspecified vulnerability in the Webservice Axis Gateway in IBM Rational Focal Point 6.4 before devfix1, 6.4.1.3 before devfix1, 6.5.1 before devfix1, 6.5.2 before devfix4, 6.5.2.3 before devfix9, 6.6 before devfix5, 6.6.0.1 before devfix2, and 6.6.1 allows remote attackers to bypass intended...

CVE-2013-5398

Unspecified vulnerability in the Webservice Axis Gateway in IBM Rational Focal Point 6.4 before devfix1, 6.4.1.3 before devfix1, 6.5.1 before devfix1, 6.5.2 before devfix4, 6.5.2.3 before devfix9, 6.6 before devfix5, 6.6.0.1 before devfix2, and 6.6.1 allows remote attackers to bypass intended...

CVE-2013-5397

CVE-2013-5397 covers an information-disclosure vulnerability in IBM Rational Focal Point’s Webservice Axis Gateway. The issue affects multiple versions (6.4 to 6.6.x with various devfix exclusions) and is described as allowing remote attackers to bypass access restrictions and obtain sensitive in...

VMware vCenter Server Denial of Service (VMSA-2012-0018)

The version of VMware vCenter installed on the remote host is 4.1 before update 3 or 5.0 before Update 2. Such versions are potentially affected by a denial of service vulnerability due to an issue in webservice logging. By exploiting this flaw, a remote, unauthenticated attacker could crash the...

Fedora 18 : bugzilla-4.2.4-1.fc18 (2012-18264)

These releases fix a number of issues with Bugzilla. - Confidential product and component names can be disclosed to unauthorized users if they are used to control the visibility of a custom field. - When calling the 'User.get' WebService method with a 'groups' argument, it is possible to check if...

CVE-2012-4198

The CVE-2012-4198 issue affects Bugzilla’s WebService User.get method in Bugzilla 3.7.x and 4.0.x before 4.0.9, 4.1.x and 4.2.x before 4.2.4, and 4.3.x/4.4.x before 4.4rc1. Root cause: different outcomes for a groups request depending on whether a group exists, enabling remote authenticated users...