CVE-2013-6501

The default soap.wsdlcachedir setting in 1 php.ini-production and 2 php.ini-development in PHP through 5.6.7 specifies the /tmp directory, which makes it easier for local users to conduct WSDL injection attacks by creating a file under /tmp with a predictable filename that is used by the getsdl...

Design/Logic Flaw

The default soap.wsdlcachedir setting in 1 php.ini-production and 2 php.ini-development in PHP through 5.6.7 specifies the /tmp directory, which makes it easier for local users to conduct WSDL injection attacks by creating a file under /tmp with a predictable filename that is used by the getsdl...

CVE-2013-6501

CVE-2013-6501 affects PHP before 5.6.7 where the default soap.wsdl_cache_dir in php.ini-production and php.ini-development points to /tmp, enabling local users to perform WSDL injection by creating a predictable file name used by get_sdl in ext/soap/php_sdl.c. Consequence described as easier loca...

CVE-2013-6501

The default soap.wsdlcachedir setting in 1 php.ini-production and 2 php.ini-development in PHP through 5.6.7 specifies the /tmp directory, which makes it easier for local users to conduct WSDL injection attacks by creating a file under /tmp with a predictable filename that is used by the getsdl...

CVE-2013-6501: Improper Neutralization of Special Elements in Output Used by a Downstream Component

The default soap.wsdlcachedir setting in 1 php.ini-production and 2 php.ini-development in PHP through 5.6.7 specifies the /tmp directory, which makes it easier for local users to conduct WSDL injection attacks by creating a file under /tmp with a predictable filename that is used by the getsdl...

Nortel Contact Recording Centralized Archive 6.5.1 - SQL Injection Exploit

No description provided by source. ?php / Nortel Contact Recording Centralized Archive 6.5.1 EyrAPIConfiguration Web Service getSubKeys Remote SQL Injection Exploit tested against: Microsoft Windows Server 2003 r2 sp2 Microsoft SQL Server 2005 Express download uri:...

OpenEMM-2013 8.10.380.hf13.0.066 - SOAP SQL Injection / Stored XSS

No description provided by source. import os import sys from SOAPpy import WSDL from argparse import ArgumentParser from re import sub Exploit Title: OpenEMM 2013 SQL Injection / Stored XSS Date: 07/20/2013 Exploit Author: drone @dronesec More information and required WSDL file:...

Apache AXIS 1.0 Non-Existent WSDL Path Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/23687/info Apache AXIS is prone to a path-information-disclosure vulnerability. Remote unauthorized attackers may be able to determine webserver directory paths. Information obtained may aid attackers in launching further...

SoapUI 4.6.3 - Remote Code Execution

No description provided by source. Exploit Title: SoapUI Remote Code Execution Date: 25.12.13 Exploit Author: Barak Tawily Vendor Homepage: http://www.soapui.org/ http://www.soapui.org/ Software Link: http://www.soapui.org/Downloads/download-soapui-pro-trial.html...

CVE-2014-4669

HP Enterprise Maps 1.00 allows remote authenticated users to read arbitrary files via a WSDL document containing an XML external entity declaration in conjunction with an entity reference within a GetQuote operation, related to an XML External Entity XXE issue...

CVE-2014-4669

HP Enterprise Maps 1.00 allows remote authenticated users to read arbitrary files via a WSDL document containing an XML external entity declaration in conjunction with an entity reference within a GetQuote operation, related to an XML External Entity XXE issue...

HP Enterprise Maps 1.00 Authenticated XXE Injection

HP Enterprise Maps 1.00 Authenticated XXE vulnerability http://www8.hp.com/us/en/software/enterprise-software.html Any user that has the ability to import a file to create an artifact most, if not all authed users? can upload a specially crafted WSDL that will read files such as /etc/passwd. If y...

CVE-2014-1202

The WSDL/WADL import functionality in SoapUI before 4.6.4 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL file...

Code injection

The WSDL/WADL import functionality in SoapUI before 4.6.4 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL file...

CVE-2014-1202

The WSDL/WADL import functionality in SoapUI before 4.6.4 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL file...

CVE-2014-1202

The cvE-2014-1202 entry corresponds to a code injection/remote code execution vulnerability in SoapUI prior to version 4.6.4. The issue arises in the WSDL/WADL import functionality, where a crafted request parameter in a WSDL file can cause arbitrary Java code execution on the client. Affected co...

CVE-2014-1202: Improper Control of Generation of Code

The WSDL/WADL import functionality in SoapUI before 4.6.4 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL file...

SoapUI远程代码执行漏洞

CVE ID: CVE-2014-1202 SoapUI是免费和开放源码的跨平台功能测试解决方案。 攻击者可以使恶意的WSDL文件，确定被请求参数中的一个恶意Java代码为默认值。当客户端使用恶意的WSDL文件，并会尝试发送一个请求时，java代码将被执行。 0 SoapUI 4.6.3 目前厂商暂无提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.soapui.org/ ?xml version="1.0"? definitions name="StockQuote"...

SoapUI Remote Code Execution

Exploit Title: SoapUI Remote Code Execution Date: 25.12.13 Exploit Author: Barak Tawily Vendor Homepage: http://www.soapui.org/ Software Link: http://www.soapui.org/Downloads/download-soapui-pro-trial.html Version: vulnerable before 4.6.4 Tested on: Windows, should work at Linux as well CVE :...

SoapUI 4.6.3 - Remote Code Execution

SoapUI 4.6.3 - Remote Code Execution Exploit Title: SoapUI Remote Code Execution Date: 25.12.13 Exploit Author: Barak Tawily Vendor Homepage: http://www.soapui.org/ Software Link: http://www.soapui.org/Downloads/download-soapui-pro-trial.html Version: vulnerable before 4.6.4 Tested on: Windows,...