p. morimoto vulnerabilities and exploits

(subscribe to this query)

8

CVSSv3

A vulnerability in the web-based user interface of Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker read and write access to information stored in the affected system as well as perform remote code execu...

Cisco Evolved Programmable Network Manager 1.2.0 Cisco Evolved Programmable Network Manager 1.2.300 Cisco Evolved Programmable Network Manager 2.0.0 Cisco Prime Infrastructure 3.1 Cisco Evolved Programmable Network Manager 1.2.200 Cisco Prime Infrastructure 1.4.1 Cisco Prime Infrastructure 1.3.0.20 Cisco Prime Infrastructure 1.2.1 Cisco Prime Infrastructure 1.4.0.45 Cisco Prime Infrastructure 3.1\\(0.128\\)Cisco Prime Infrastructure 3.2\\(0.0\\)Cisco Prime Infrastructure 3.1\\(4.0\\)Cisco Prime Infrastructure 2.2 Cisco Prime Infrastructure 1.2 Cisco Prime Infrastructure 2.2\\(2\\)Cisco Prime Infrastructure 1.4.2 Cisco Prime Infrastructure 1.2.0.103 Cisco Prime Infrastructure 3.1.1 Cisco Prime Infrastructure 2.2\\(3\\)Cisco Prime Infrastructure 3.0 Cisco Evolved Programmable Network Manager 2.0\\(4.0.45d\\)Cisco Evolved Programmable Network Manager 1.2.500

5.4

CVSSv3

A vulnerability in the Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) SQL database interface could allow an authenticated, remote malicious user to impact the confidentiality and integrity of the application by executing arbitrary SQL queries, aka...

Cisco Prime Infrastructure 2.0\\(4.0.45b\\)Cisco Prime Infrastructure 3.1\\(1\\)

6.1

CVSSv3

A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) could allow an unauthenticated, remote malicious user to conduct a reflected cross-site scripting (XSS) attack against a user of the web-based ...

Cisco Prime Infrastructure 3.1 Cisco Evolved Programmable Network Manager 2.0\\(4.0.45b\\)Cisco Evolved Programmable Network Manager 2.0\\(4.0.45d\\)Cisco Prime Infrastructure 3.1\\(0.128\\)Cisco Prime Infrastructure 3.1.1 Cisco Evolved Programmable Network Manager 2.0.0

6.1

CVSSv3

A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) could allow an unauthenticated, remote malicious user to conduct a Document Object Model (DOM) based (environment or client-side) cross-site sc...

Cisco Prime Infrastructure 3.1\\(1\\)Cisco Prime Infrastructure 2.0\\(4.0.45b\\)

9.8

CVSSv3

SQL injection vulnerability in Yeager CMS 1.2.1 allows remote malicious users to execute arbitrary SQL commands via the "passwordreset&token" parameter.

Yeager Yeager Cms 1.2.1

1 EDB exploit

8.8

CVSSv3

SQL injection vulnerability in "yeager/y.php/tab_USERLIST" in Yeager CMS 1.2.1 allows local users to execute arbitrary SQL commands via the "pagedir_orderby" parameter.

Yeager Yeager Cms 1.2.1

1 EDB exploit

7.2

CVSSv3

Multiple server-side request forgery (SSRF) vulnerabilities in Yeager CMS 1.2.1 allow remote malicious users to trigger outbound requests and enumerate open ports via the dbhost parameter to libs/org/adodb_lite/tests/test_adodb_lite.php, libs/org/adodb_lite/tests/test_datadiction...

Yeager Yeager Cms 1.2.1

1 EDB exploit

NA

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-0237. Reason: This candidate is a duplicate of CVE-2013-0237. Notes: All CVE users should reference CVE-2013-0237 instead of this candidate. All references and descriptions in this candidate have been removed...

1 EDB exploit

5.5

CVSSv3

The websites that were built from Zeta Producer Desktop CMS prior to 14.2.1 are vulnerable to unauthenticated file disclosure if the plugin "filebrowser" is installed, because of assets/php/filebrowser/filebrowser.main.php?file=../ directory traversal.

Zeta-producer Zeta Producer

1 EDB exploit

9.8

CVSSv3

SQL injection vulnerability in the password recovery feature in Yeager CMS 1.2.1 allows remote malicious users to change the account credentials of known users via the "userEmail" parameter.

Yeager Yeager Cms 1.2.1

1 EDB exploit

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook