high-tech bridge sa vulnerabilities and exploits

(subscribe to this query)

A Privilege Escalation Vulnerability exists in Free Reprintables ArticleFR 11.06.2014 due to insufficient access restrictions in the data.php script, which could let a remote malicious user obtain access or modify or delete database information.

Freereprintables Articlefr

1 EDB exploit

The Bitrix e-Store module prior to 14.0.1 for Bitrix Site Manager uses sequential values for the BITRIX_SM_SALE_UID cookie, which makes it easier for remote malicious users to guess the cookie value and bypass authentication via a brute force attack.

Bitrix Bitrix E-store Module

The eshop_checkout function in checkout.php in the Wordpress Eshop plugin 6.3.11 and previous versions does not validate variables in the "eshopcart" HTTP cookie, which allows remote malicious users to perform cross-site scripting (XSS) attacks, or a path disclosure att...

Eshop Project Eshop

LibreOffice 3.5.x prior to 3.5.7.2 and 3.6.x prior to 3.6.1, and OpenOffice.org (OOo), allows remote malicious users to cause a denial of service (NULL pointer dereference) via a crafted (1) odt file to vcllo.dll, (2) ODG (Drawing document) file to svxcorelo.dll, (3) PolyPolygon ...

Libreoffice Libreoffice Libreoffice Libreoffice 3.5 Libreoffice Libreoffice 3.5.Libreoffice Libreoffice 3.5.0 Libreoffice Libreoffice 3.5.1 Libreoffice Libreoffice 3.5.2 Libreoffice Libreoffice 3.5.3 Libreoffice Libreoffice 3.5.4 Libreoffice Libreoffice 3.5.5 Libreoffice Libreoffice 3.5.5.1 Libreoffice Libreoffice 3.5.5.2 Libreoffice Libreoffice 3.5.5.3

Multiple cross-site scripting (XSS) vulnerabilities in the admin panel in osCMax prior to 2.5.1 allow remote malicious users to inject arbitrary web script or HTML via the (1) username parameter in a process action to admin/login.php; (2) pageTitle, (3) current_product_id, or (4)...

9 EDB exploits

Multiple cross-site scripting (XSS) vulnerabilities in BrowserCRM 5.100.01 and previous versions allow remote malicious users to inject arbitrary web script or HTML via the PATH_INFO to (1) index.php, (2) modules/admin/admin_module_index.php, or (3) modules/calendar/customise_cal...

Browsercrm Browsercrm Browsercrm Browsercrm 4.604.01 Browsercrm Browsercrm 4.605.00 Browsercrm Browsercrm 4.607.00 Browsercrm Browsercrm 4.610.00 Browsercrm Browsercrm 4.611.01 Browsercrm Browsercrm 4.612.00 Browsercrm Browsercrm 4.614.00 Browsercrm Browsercrm 4.615.10 Browsercrm Browsercrm 4.615.11 Browsercrm Browsercrm 4.616.00 Browsercrm Browsercrm 4.617.00

4 EDB exploits

Multiple directory traversal vulnerabilities in OpenEMR 4.1.0 allow remote authenticated users to read arbitrary files via a .. (dot dot) in the formname parameter to (1) contrib/acog/print_form.php; or (2) load_form.php, (3) view_form.php, or (4) trend_form.php in interface/pati...

Openemr Openemr 4.1.0

3 EDB exploits

Multiple cross-site scripting (XSS) vulnerabilities in OrangeHRM prior to 2.7 allow remote malicious users to inject arbitrary web script or HTML via the (1) newHspStatus parameter to plugins/ajaxCalls/haltResumeHsp.php, (2) sortOrder1 parameter to templates/hrfunct/emppop.php, o...

Orangehrm Orangehrm Orangehrm Orangehrm 2.6 Orangehrm Orangehrm 2.6.0 Orangehrm Orangehrm 2.6.0.1 Orangehrm Orangehrm 2.6.1 Orangehrm Orangehrm 2.6.2 Orangehrm Orangehrm 2.6.3 Orangehrm Orangehrm 2.6.4 Orangehrm Orangehrm 2.6.5 Orangehrm Orangehrm 2.6.6 Orangehrm Orangehrm 2.6.7 Orangehrm Orangehrm 2.6.8

3 EDB exploits

Multiple SQL injection vulnerabilities in Dolibarr 3.1.0 RC and probably earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) sortfield, (2) sortorder, and (3) sall parameters to user/index.php and (b) user/group/index.php; the id parameter to (4...

Dolibarr Dolibarr Erp/crm Dolibarr Dolibarr Erp/crm 2.5.0 Dolibarr Dolibarr Erp/crm 2.6.0 Dolibarr Dolibarr Erp/crm 2.6.1 Dolibarr Dolibarr Erp/crm 2.7.0 Dolibarr Dolibarr Erp/crm 2.7.1 Dolibarr Dolibarr Erp/crm 2.8.0 Dolibarr Dolibarr Erp/crm 2.8.1 Dolibarr Dolibarr Erp/crm 2.9.0 Dolibarr Dolibarr Erp/crm 3.0.0 Dolibarr Dolibarr Erp/crm 3.0.1

3 EDB exploits

Multiple cross-site scripting (XSS) vulnerabilities in the All-in-One Event Calendar plugin 1.4 and 1.5 for WordPress allow remote malicious users to inject arbitrary web script or HTML via the (1) title parameter to app/view/agenda-widget-form.php; (2) args, (3) title, (4) befor...

Timely All-in-one Event Calendar 1.4 Timely All-in-one Event Calendar 1.5

4 EDB exploits

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook