4927 matches found
WORK system e-commerce <= 3.0.5 Remote File Inclusion Vulnerability
No description provided by source. Rodrigo Duarte WuefezAT2die4.com ;D WORK system e-commerce: WORK PHP,Mysql content management system CMS e-commerce or not : ajax, workflow, content,package,language,currency,country,price,stock,group user,CSS,banner,logo,...
work system E-Commerce 3.0.5 - Remote File Inclusion
work system E-Commerce 3.0.5 - Remote File Inclusion Rodrigo Duarte WuefezAT2die4.com ;D WORK system e-commerce: WORK PHP,Mysql content management system CMS e-commerce or not : ajax, workflow, content,package,language,currency,country,price,stock,group user,CSS,banner,logo,...
Multiple Printer Providers (spooler service) Privilege Escalation Exploit
No description provided by source. /Private exploit- internal use only Title: Universal exploit for vulnerable printer providers spooler service. Vulnerability: Insecure EnumPrintersW calls Author: Andres Tarasco Acu [email protected] Website: http://www.514.es This code should allow to gain SYSTEM...
Work System eCommerce 3.0.3/3.0.4 - 'forum.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/21580/info WORK system e-commerce is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other...
CVE-2006-6041
Multiple PHP remote file inclusion vulnerabilities in Laurent Van den Reysen WORK system e-commerce 3.0.2, and other versions before 3.0.4, allow remote attackers to execute arbitrary PHP code via a URL in the ginclude parameter to 1 index.php, 2 module/forum/forum.php, 3 unspecified files under...
WORK System E-Commerce <= 3.0.1 Remote Include Vulnerability
No description provided by source. ============================================================================================ WORK System E-Commerce ginclude Remote File Inclusion Vulnerability ============================================================================================...
WORK System E-Commerce 3.0.1 - Remote File Inclusion
WORK System E-Commerce 3.0.1 - Remote File Inclusion ============================================================================================ WORK System E-Commerce ginclude Remote File Inclusion Vulnerability...
WORK System E-Commerce 3.0.1 - Remote File Inclusion
============================================================================================ WORK System E-Commerce ginclude Remote File Inclusion Vulnerability ============================================================================================ Product............: WORK system e-commerce...
WORK System E-Commerce <= 3.0.1 Remote Include Vulnerability
Exploit for unknown platform in category web applications ============================================================ WORK System E-Commerce .inc"; Vulnerable Files: ------------------ 'index.php' main directory along with many files in the './administration/module' and './module' directories...
CVE-2006-5372
Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10 up to 11.5.10CU2 have unknown impact and remote authenticated attack vectors, aka Vuln 1 APPS11 for Oracle Universal Work Queue and 2 APPS12 for Oracle Application Object Library...
CVE-2006-5372
Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10 up to 11.5.10CU2 have unknown impact and remote authenticated attack vectors, aka Vuln 1 APPS11 for Oracle Universal Work Queue and 2 APPS12 for Oracle Application Object Library...
CVE-2005-3852
SQL injection vulnerability in search.asp in Online Work Order Suite OWOS Lite Edition for ASP 3.0 allows remote attackers to execute arbitrary SQL commands via the keyword parameter...
CVE-2005-3852
SQL injection vulnerability in search.asp in Online Work Order Suite OWOS Lite Edition for ASP 3.0 allows remote attackers to execute arbitrary SQL commands via the keyword parameter...
CVE-2005-3852
The CVE-2005-3852 entry relates to OWOS Lite Edition for ASP 3.0. Affected component: search.asp; vulnerability: SQL injection via the keyword parameter. Impact: remote attackers could execute arbitrary SQL commands. No remediation details are provided in the supplied documents.
OWOS Lite 3.0 SQL inj.
Online Work Order Suite: Lite Edition for ASP 3.0 SQL inj. Vuln. dicovered by : r0t Date: 25 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/owos-lite-30-sql-inj.html Vendor:www.onlinetechtools.com Product link:http://www.onlinetechtools.com/products/owoslite/ affected vesion:3.0 a...
CERN HTTPD access control bypass
It is possible to access protected web pages by changing / with // or /./ This was a bug in old versions of CERN web server A work around consisted in rejecting patterns like: // // /./ /./ OpenVAS Vulnerability Test $Id: cernhttpdaccessctrl.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: CE...
CVE-2005-3455
Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5 up to 11.5.10 have unknown impact and attack vectors, as identified by Oracle Vuln 1 APPS01 in Application Install; 2 APPS02 and 3 APPS03 in Application Object Library; 4 APPS05 and 5 APPS06 in Applications...
Prozilla 1.3.6 Remote Stack Overflow Exploit
No description provided by source. / 20/10/2004 This is a private work of Serkan Akpolat [email protected] for the unpublished prozilla-1.3.6 format string/buffer overflow vulnerability , though this version only exploits the stack overflow. Tested against current gentoo/slack/debian/suse wi...
CVE-1999-1470
Eastman Work Management 3.21 stores passwords in cleartext in the COMMON and LOCATOR registry keys, which could allow local users to gain privileges...
CVE-1999-1470
CVE-1999-1470 concerns Eastman Work Management 3.21, which stores passwords in cleartext in the COMMON and LOCATOR registry keys, enabling local users to gain privileges. The vulnerability is characterized as a local, low-complexity issue with partial confidentiality, integrity, and availability ...