Archive for the ‘SANS’ Category

12.2.13 OpenEMR "validateUser.php" SQL Injection

|
Comments Off

Posted in SANS on January 6th, 2012 by @RISK: The Consensus Security Alert

CVEs: CVE: Not Available

Platform: Web Application - SQL Injection

Tags: , |

12.2.12 Plogger "id" Parameter SQL Injection

|
Comments Off

Posted in SANS on January 6th, 2012 by @RISK: The Consensus Security Alert

CVEs: CVE: Not Available

Platform: Web Application - SQL Injection

Tags: , |

12.2.11 WSN Links "report.php" SQL Injection

|
Comments Off

Posted in SANS on January 6th, 2012 by @RISK: The Consensus Security Alert

CVEs: CVE: Not Available

Platform: Web Application - SQL Injection

Tags: , |

12.2.10 BigACE Multiple Cross-Site Scripting Vulnerabilities

|
Comments Off

Posted in SANS on January 6th, 2012 by @RISK: The Consensus Security Alert

CVEs: CVE: Not Available

Platform: Web Application - Cross Site Scripting

Tags: , |

12.2.9 PhpMyAdmin Multiple Cross-Site Scripting Vulnerabilities

|
Comments Off

Posted in SANS on January 6th, 2012 by @RISK: The Consensus Security Alert

CVEs: CVE: CVE-2011-4780

Platform: Web Application - Cross Site Scripting

Tags: , |

12.2.8 Siena CMS "err" Parameter Cross-Site Scripting

|
Comments Off

Posted in SANS on January 6th, 2012 by @RISK: The Consensus Security Alert

CVEs: CVE: Not Available

Platform: Web Application - Cross Site Scripting

Tags: , |

12.2.23 Vtiger CRM "graph.php" Script Authentication Bypass

|
Comments Off

Posted in SANS on January 6th, 2012 by @RISK: The Consensus Security Alert

CVEs: CVE: Not Available

Platform: Web Application

Tags: , |

12.2.22 Register Plus Redux Multiple Security vulnerabilities

|
Comments Off

Posted in SANS on January 6th, 2012 by @RISK: The Consensus Security Alert

CVEs: CVE: Not Available

Platform: Web Application

Tags: , |

12.2.21 Bugzilla Cross Site Scripting and Security Bypass Vulnerabilities

|
Comments Off

Posted in SANS on January 6th, 2012 by @RISK: The Consensus Security Alert

CVEs: CVE: CVE-2011-3657,CVE-2011-3667

Platform: Web Application

Tags: , |

12.2.19 Mavili Guestbook Multiple Security Vulnerabilities

|
Comments Off

Posted in SANS on January 6th, 2012 by @RISK: The Consensus Security Alert

CVEs: CVE: Not Available

Platform: Web Application

Tags: , |