CVE-2020-6271: XML Injection (aka Blind XPath Injection)

SAP Solution Manager Problem Context Manager, version 7.2, does not perform the necessary authentication, allowing an attacker to consume large amounts of memory, causing the system to crash and read restricted data files visible for technical administration users of the diagnostics agent...

Jinwei Smart Restaurant suffers from xml injection vulnerability

Jinwei Smart Restaurant is a free restaurant management software. It is suitable for all kinds of large and small restaurants, as well as fast food, Chinese food, western food, hot pot restaurant and other kinds of catering business. Jinwei Intelligent Restaurant has an xml injection vulnerabilit...

MCIR

This is a collection of intentionally vulnerable applications for testing code injection vulnerabilities. The applications are designed to be used in a trusted web environment and should not be published on a production server or exposed to the internet. The applications include: CryptOMG: A...

PT-2020-20164 · Abb · Compact Hmi +17

Name of the Vulnerable Software and Affected Versions: ABB Ability System 800xA versions 5.1 through 6.1 Compact HMI versions 5.1 through 6.0 Control Builder Safe versions 1.0 through 2.0 Symphony Plus -S+ Operations versions 3.0 through 3.2 Symphony Plus -S+ Engineering versions 1.1 through 2.2...

CVE-2020-11535

An issue was discovered in ONLYOFFICE Document Server 5.5.0. An attacker can craft a malicious .docx file, and exploit XML injection to enter an attacker-controlled parameter into the x2t binary, to rewrite this binary and/or libxcb.so.1, and execute code on a victim's server...

CVE-2020-11535

An issue was discovered in ONLYOFFICE Document Server 5.5.0. An attacker can craft a malicious .docx file, and exploit XML injection to enter an attacker-controlled parameter into the x2t binary, to rewrite this binary and/or libxcb.so.1, and execute code on a victim's server...

Design/Logic Flaw

An issue was discovered in ONLYOFFICE Document Server 5.5.0. An attacker can craft a malicious .docx file, and exploit XML injection to enter an attacker-controlled parameter into the x2t binary, to rewrite this binary and/or libxcb.so.1, and execute code on a victim's server...

CVE-2020-11535

An issue was discovered in ONLYOFFICE Document Server 5.5.0. An attacker can craft a malicious .docx file, and exploit XML injection to enter an attacker-controlled parameter into the x2t binary, to rewrite this binary and/or libxcb.so.1, and execute code on a victim's server...

CVE-2020-11535

ONLYOFFICE Document Server 5.5.0 is affected by CVE-2020-11535. A crafted malicious .docx file enables XML injection that can inject parameters into the x2t binary, allowing rewriting of x2t and/or libxcb.so.1 and enabling code execution on the server. The connected documents confirm the affected...

CVE-2020-11535: XML Injection (aka Blind XPath Injection)

An issue was discovered in ONLYOFFICE Document Server 5.5.0. An attacker can craft a malicious .docx file, and exploit XML injection to enter an attacker-controlled parameter into the x2t binary, to rewrite this binary and/or libxcb.so.1, and execute code on a victim's server...

PT-2020-12672

Name of the Vulnerable Software and Affected Versions ONLYOFFICE Document Server version 5.5.0 Description An issue was discovered that allows an attacker to craft a malicious .docx file and exploit XML injection. This can lead to entering an attacker-controlled parameter into the x2t binary,...

Topcoder: SVG file upload leads to XML injection

Summary: Upload Avatar option allows the user to upload image/ . Thus enabling the upload of many file formats including SVG files MIME type: image/svg+xml SVG files are XML based graphics files in 2D images. Thus, this opens up an attack vector to upload specially crafted malicious SVG files. Th...

CVE-2018-1000632

dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection vulnerability in Class: Element. Methods: addElement, addAttribute that can result in an attacker tampering with XML documents through XML injection. This attack appear to be exploitable via an attacker specifying attributes or...

SmartClient 120 Information Disclosure / XML Injection / LFI / Code Execution

Hello, We are informing you about some vulnerabilities we found in SmartClientv120. 1. Description During an analysis on the Isomorphic Smartclient v12 LGPL version, we found multiple security flaws that are here described. The application we tested SmartClientv120p2019-06-13LGPL can be downloade...

CVE-2015-6970

The web interface in Bosch Security Systems NBN-498 Dinion2X Day/Night IP Cameras with H.264 Firmware 4.54.0026 allows remote attackers to conduct XML injection attacks via the idstring parameter to rcp.xml...

Design/Logic Flaw

The web interface in Bosch Security Systems NBN-498 Dinion2X Day/Night IP Cameras with H.264 Firmware 4.54.0026 allows remote attackers to conduct XML injection attacks via the idstring parameter to rcp.xml...

CVE-2015-6970

The web interface in Bosch Security Systems NBN-498 Dinion2X Day/Night IP Cameras with H.264 Firmware 4.54.0026 allows remote attackers to conduct XML injection attacks via the idstring parameter to rcp.xml...

CVE-2015-6970

CVE-2015-6970 affects Bosch Security Systems NBN-498 Dinion2X Day/Night IP Cameras with H.264 firmware 4.54.0026. The web interface is vulnerable to XML injection via the idstring parameter to rcp.xml, enabling remote attackers to tamper or extract data. Public exploit references (Exploit-DB) doc...

PT-2020-7877

Name of the Vulnerable Software and Affected Versions: Bosch Security Systems NBN-498 Dinion2X Day/Night IP Cameras with H.264 Firmware version 4.54.0026 Description: The issue allows remote attackers to conduct XML injection attacks. This is achieved via the idstring parameter to the "rcp.xml"...

CVE-2015-6970: XML Injection (aka Blind XPath Injection)

The web interface in Bosch Security Systems NBN-498 Dinion2X Day/Night IP Cameras with H.264 Firmware 4.54.0026 allows remote attackers to conduct XML injection attacks via the idstring parameter to rcp.xml...