Indusoft Web Studio - Directory Traversal Information Disclosure (Metasploit)
EDB-ID: 42699Author: James FittsPublished: 2017-09-13CVE: CVE-2014-0780 Type: WebappsPlatform: WindowsAliases: N/AAdvisory/Source: N/ATags: Metasploit FrameworkVulnerable App: N/A class...
View ArticleICHelpDesk 1.1 - 'pk' Parameter SQL Injection
EDB-ID: 42688Author: Ihsan SencanPublished: 2017-09-13CVE: N/A Type: WebappsPlatform: PHPVulnerable App: N/A # Exploit Title: Support Tickets Helpdesk PHP Script 1.1 - SQL Injection # Dork: N/A # Date:...
View ArticleTrend Micro Control Manager - ImportFile Directory Traversal RCE (Metasploit)
EDB-ID: 42692Author: James FittsPublished: 2017-09-13CVE: N/A Type: RemotePlatform: PHPAliases: N/AAdvisory/Source: N/ATags: Metasploit FrameworkVulnerable App: N/A require 'msf/core/exploit/php_exe'...
View ArticleICSiteBuilder 1.1 - SQL Injection
EDB-ID: 42689Author: Ihsan SencanPublished: 2017-09-13CVE: N/A Type: WebappsPlatform: PHPVulnerable App: N/A # Exploit Title: Website Builder Script With e-Commerce 1.1 - SQL Injection # Dork: N/A #...
View ArticleSielco Sistemi Winlog 2.07.16 - Buffer Overflow (Metasploit)
EDB-ID: 42694Author: James FittsPublished: 2017-09-13CVE: N/A Type: RemotePlatform: WindowsAliases: N/AAdvisory/Source: N/ATags: Metasploit FrameworkVulnerable App: N/A class MetasploitModule <...
View ArticleICAffiliateTracking 1.1 - Authentication Bypass
EDB-ID: 42690Author: Ihsan SencanPublished: 2017-09-13CVE: N/A Type: WebappsPlatform: ASPVulnerable App: N/A # Exploit Title: Affiliate Tracking Script 1.1 - Authentication Bypass # Dork: N/A # Date:...
View ArticleCloudview NMS < 2.00b - Arbitrary File Upload (Metasploit)
EDB-ID: 42704Author: James FittsPublished: 2017-09-13CVE: N/A Type: RemotePlatform: WindowsAliases: N/AAdvisory/Source: N/ATags: Metasploit FrameworkVulnerable App: N/A class MetasploitModule <...
View ArticleViap Automation WinPLC7 5.0.45.5921 - Recv Buffer Overflow (Metasploit)
EDB-ID: 42693Author: James FittsPublished: 2017-09-13CVE: CVE-2017-5177 Type: RemotePlatform: WindowsAliases: N/AAdvisory/Source: N/ATags: Metasploit FrameworkVulnerable App: N/A class MetasploitModule...
View ArticleEMC CMCNE Inmservlets.war FileUploadController 11.2.1 - Remote Code...
EDB-ID: 42701Author: James FittsPublished: 2017-09-13CVE: CVE-2013-6810 Type: RemotePlatform: JavaAliases: N/AAdvisory/Source: N/ATags: Metasploit FrameworkVulnerable App: N/A class MetasploitModule...
View ArticleAlienvault OSSIM av-centerd 4.7.0 - 'get_log_line' Command Injection...
EDB-ID: 42709Author: James FittsPublished: 2017-09-13CVE: CVE-2014-3805 Type: RemotePlatform: LinuxAliases: N/AAdvisory/Source: N/ATags: Metasploit FrameworkVulnerable App: N/A require 'rexml/document'...
View ArticleDameware Mini Remote Control 4.0 - Username Stack Buffer Overflow (Metasploit)
EDB-ID: 42703Author: James FittsPublished: 2017-09-13CVE: CVE-2005-2842 Type: RemotePlatform: WindowsAliases: N/AAdvisory/Source: N/ATags: Metasploit FrameworkVulnerable App: N/A class MetasploitModule...
View ArticleCarlo Gavazzi Powersoft 2.1.1.1 - Directory Traversal File Disclosure...
EDB-ID: 42705Author: James FittsPublished: 2017-09-13CVE: N/A Type: WebappsPlatform: WindowsAliases: N/AAdvisory/Source: N/ATags: Metasploit FrameworkVulnerable App: N/A class MetasploitModule <...
View ArticleAlienvault OSSIM av-centerd Util.pm sync_rserver - Command Execution...
EDB-ID: 42708Author: James FittsPublished: 2017-09-13CVE: CVE-2014-3804 Type: RemotePlatform: LinuxAliases: N/AAdvisory/Source: N/ATags: Metasploit FrameworkVulnerable App: N/A class MetasploitModule...
View ArticleFatek Automation PLC WinProladder 3.11 Build 14701 - Stack-Based Buffer...
EDB-ID: 42700Author: James FittsPublished: 2017-09-13CVE: CVE-2016-8377 Type: RemotePlatform: WindowsAliases: N/AAdvisory/Source: N/ATags: Metasploit FrameworkVulnerable App: N/A class MetasploitModule...
View ArticleICDental Clinic 1.2 - 'key' Parameter SQL Injection
EDB-ID: 42686Author: Ihsan SencanPublished: 2017-09-13CVE: N/A Type: WebappsPlatform: PHPVulnerable App: N/A # Exploit Title: Dental Clinic Site Script 1.2 - SQL Injection # Dork: N/A # Date:...
View ArticleEMC CMCNE 11.2.1 - FileUploadController Remote Code Execution (Metasploit)
EDB-ID: 42702Author: James FittsPublished: 2017-09-13CVE: CVE-2013-6810 Type: RemotePlatform: JavaAliases: N/AAdvisory/Source: N/ATags: Metasploit FrameworkVulnerable App: N/A class MetasploitModule...
View ArticlePTC KSV1 Script 1.7 - 'type' Parameter SQL Injection
EDB-ID: 42715Author: Ihsan SencanPublished: 2017-09-14CVE: N/A Type: WebappsPlatform: PHPVulnerable App: N/A # Exploit Title: PTC KSV1 Script 1.7 - SQL Injection # Dork: N/A # Date: 14.09.2017 # Vendor...
View ArticleTheater Management Script - SQL Injection
EDB-ID: 42716Author: Ihsan SencanPublished: 2017-09-14CVE: N/A Type: WebappsPlatform: PHPVulnerable App: N/A # Exploit Title: Theater Management Script - SQL Injection # Dork: N/A # Date: 14.09.2017 #...
View ArticleEnterprise Edition Payment Processor Script 3.7 - SQL Injection
EDB-ID: 42713Author: Ihsan SencanPublished: 2017-09-14CVE: N/A Type: WebappsPlatform: PHPVulnerable App: N/A # Exploit Title: Enterprise Edition Payment Processor Script 3.7 - SQL Injection # Dork: N/A...
View ArticleAdserver Script 5.6 - SQL Injection
EDB-ID: 42714Author: Ihsan SencanPublished: 2017-09-14CVE: N/A Type: WebappsPlatform: PHPVulnerable App: N/A # Exploit Title: Adserver Script 5.6 - SQL Injection # Dork: N/A # Date: 14.09.2017 # Vendor...
View Article