Work System eCommerce 3.0.3/3.0.4 - 'forum.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/21580/info WORK system e-commerce is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other...

CVE-2006-6041

Multiple PHP remote file inclusion vulnerabilities in Laurent Van den Reysen WORK system e-commerce 3.0.2, and other versions before 3.0.4, allow remote attackers to execute arbitrary PHP code via a URL in the ginclude parameter to 1 index.php, 2 module/forum/forum.php, 3 unspecified files under...

CVE-2006-6041: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in Laurent Van den Reysen WORK system e-commerce 3.0.2, and other versions before 3.0.4, allow remote attackers to execute arbitrary PHP code via a URL in the ginclude parameter to 1 index.php, 2 module/forum/forum.php, 3 unspecified files under...

WORK System E-Commerce <= 3.0.1 Remote Include Vulnerability

No description provided by source. ============================================================================================ WORK System E-Commerce ginclude Remote File Inclusion Vulnerability ============================================================================================...

WORK System E-Commerce <= 3.0.1 Remote Include Vulnerability

Exploit for unknown platform in category web applications ============================================================ WORK System E-Commerce .inc"; Vulnerable Files: ------------------ 'index.php' main directory along with many files in the './administration/module' and './module' directories...

WORK System E-Commerce 3.0.1 - Remote File Inclusion

WORK System E-Commerce 3.0.1 - Remote File Inclusion ============================================================================================ WORK System E-Commerce ginclude Remote File Inclusion Vulnerability...

WORK System E-Commerce 3.0.1 - Remote File Inclusion

============================================================================================ WORK System E-Commerce ginclude Remote File Inclusion Vulnerability ============================================================================================ Product............: WORK system e-commerce...

CVE-2006-5372

Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10 up to 11.5.10CU2 have unknown impact and remote authenticated attack vectors, aka Vuln 1 APPS11 for Oracle Universal Work Queue and 2 APPS12 for Oracle Application Object Library...

CVE-2006-5372

Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10 up to 11.5.10CU2 have unknown impact and remote authenticated attack vectors, aka Vuln 1 APPS11 for Oracle Universal Work Queue and 2 APPS12 for Oracle Application Object Library...

CVE-2006-5372: Undefined Security Weakness

Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10 up to 11.5.10CU2 have unknown impact and remote authenticated attack vectors, aka Vuln 1 APPS11 for Oracle Universal Work Queue and 2 APPS12 for Oracle Application Object Library...

CVE-2005-3852

SQL injection vulnerability in search.asp in Online Work Order Suite OWOS Lite Edition for ASP 3.0 allows remote attackers to execute arbitrary SQL commands via the keyword parameter...

CVE-2005-3852

The CVE-2005-3852 entry relates to OWOS Lite Edition for ASP 3.0. Affected component: search.asp; vulnerability: SQL injection via the keyword parameter. Impact: remote attackers could execute arbitrary SQL commands. No remediation details are provided in the supplied documents.

CVE-2005-3852

SQL injection vulnerability in search.asp in Online Work Order Suite OWOS Lite Edition for ASP 3.0 allows remote attackers to execute arbitrary SQL commands via the keyword parameter...

CVE-2005-3852: Undefined Security Weakness

SQL injection vulnerability in search.asp in Online Work Order Suite OWOS Lite Edition for ASP 3.0 allows remote attackers to execute arbitrary SQL commands via the keyword parameter...

OWOS Lite 3.0 SQL inj.

Online Work Order Suite: Lite Edition for ASP 3.0 SQL inj. Vuln. dicovered by : r0t Date: 25 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/owos-lite-30-sql-inj.html Vendor:www.onlinetechtools.com Product link:http://www.onlinetechtools.com/products/owoslite/ affected vesion:3.0 a...

CERN HTTPD access control bypass

It is possible to access protected web pages by changing / with // or /./ This was a bug in old versions of CERN web server A work around consisted in rejecting patterns like: // // /./ /./ OpenVAS Vulnerability Test $Id: cernhttpdaccessctrl.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: CE...

CVE-2005-3455

Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5 up to 11.5.10 have unknown impact and attack vectors, as identified by Oracle Vuln 1 APPS01 in Application Install; 2 APPS02 and 3 APPS03 in Application Object Library; 4 APPS05 and 5 APPS06 in Applications...

Prozilla 1.3.6 Remote Stack Overflow Exploit

No description provided by source. / 20/10/2004 This is a private work of Serkan Akpolat [email protected] for the unpublished prozilla-1.3.6 format string/buffer overflow vulnerability , though this version only exploits the stack overflow. Tested against current gentoo/slack/debian/suse wi...

CVE-2002-1038: Undefined Security Weakness

Double Choco Latte DCL before 20020706 does not properly verify if a file was uploaded, which allows remote attackers to conduct certain operations on arbitrary files via the 1 Projects: Upload File Attachment or 2 Work Orders: Import features...

CVE-1999-1470

CVE-1999-1470 concerns Eastman Work Management 3.21, which stores passwords in cleartext in the COMMON and LOCATOR registry keys, enabling local users to gain privileges. The vulnerability is characterized as a local, low-complexity issue with partial confidentiality, integrity, and availability ...