CVE Vulnerability Catalog

The CVE-2017-15877 vulnerability in the db.php file in GPWeb 8.4.61 has insecure permissions that allow remote attackers to view the password and user database.

CVE-2017-15875 is a SQL injection vulnerability in the Password Recovery feature in GPWeb 8.4.61. It allows remote attackers to execute arbitrary SQL commands via the 'checkemail' parameter.

The Application Firewall Pack (AFP) component on Kemp Load Balancer devices with software before 7.2.40.1 allows a Security Feature Bypass via an HTTP POST request.

CWEBNET/WOSummary/List in ZUUSE BEIMS ContractorWeb .NET 5.18.0.0 allows SQL injection via the tradestatus, assetno, assignto, building, domain, jobtype, site, trade, woType, workorderno, or workorderstatus parameter.

Paid To Read Script version 2.0.5 has an SQL Injection vulnerability via the uid parameter in admin/userview.php, the fnum parameter in admin/viewemcamp.php, or the fn parameter in admin/viewvisitcamp.php.

Bus Booking Script version 1.0 has an SQL Injection vulnerability via the txtname parameter in admin/index.php.

FS Lynda Clone version 1.0 has a SQL Injection vulnerability via the keywords parameter in the tutorial/ path.

The BrightSign Digital Signage (4k242) device with firmware version 6.2.63 and below has a directory traversal vulnerability via the rp parameter in /storage.html, allowing an attacker to read or write files.

CMS Made Simple (CMSMS) before 2.2.5 does not properly cache login information in cookies.

CMS Made Simple (CMSMS) before version 2.2.5 does not properly cache login information in sessions.

Maccms 8.x allows remote command execution via the wd parameter in an index.php?m=vod-search request.

DedeCMS through 5.7 is vulnerable to SQL Injection via the $_FILES superglobal in plus/recommend.php.

DedeCMS versions up to 5.7 are vulnerable to SQL Injection via the logo parameter in plus/flink_add.php.

Sonatype Nexus Repository Manager through 2.14.5 has weak password encryption with a hardcoded CMMDwoV value in the LDAP integration feature.

Trape before 2017-11-05 has SQL injection vulnerability via various parameters, including /nr red, /nr vId, and many registration-related parameters.

Commvault Edge Communication Service (cvd) prior to version 11 SP7 or version 11 SP6 with hotfix 590 is prone to a stack-based buffer overflow vulnerability that could lead to arbitrary code execution with administrative privileges.

D-Link DIR-130 firmware version 1.23 and DIR-330 firmware version 1.12 do not sufficiently protect administrator credentials. The tools_admin.asp page discloses the administrator password in base64 encoding in the returned web page.

D-Link DIR-130 firmware version 1.23 and DIR-330 firmware version 1.12 are vulnerable to authentication bypass of the remote login page. A remote attacker that can access the remote management login page can manipulate the POST request in such a manner as to access some administrator-only pages such as tools_admin.asp without credentials.

ACTi cameras, including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC, use non-random default credentials. A remote attacker can take complete control of a device using default admin credentials.

ACTi cameras, including the D, B, I, and E series, using firmware version A1D-500-V6.11.31-AC have a web application that uses the GET method to process requests containing sensitive information such as user account name and password.