Show filters
29 Total Results
Displaying 11-20 of 29
Sort by:
Attacker Value
Unknown
CVE-2024-10651
Disclosure Date: November 01, 2024 (last updated February 27, 2025)
IDExpert from CHANGING Information Technology does not properly validate a specific parameter in the administrator interface, allowing remote attackers with administrator privileges to exploit this vulnerability to read arbitrary system files.
0
Attacker Value
Unknown
CVE-2024-6406
Disclosure Date: September 18, 2024 (last updated February 26, 2025)
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Yordam Information Technology Mobile Library Application allows Retrieve Embedded Sensitive Data.This issue affects Mobile Library Application: before 5.0.
0
Attacker Value
Unknown
CVE-2024-5682
Disclosure Date: September 18, 2024 (last updated February 26, 2025)
Improper Restriction of Excessive Authentication Attempts vulnerability in Yordam Information Technology Yordam Library Automation System allows Interface Manipulation.This issue affects Yordam Library Automation System: before 20.1.
0
Attacker Value
Unknown
CVE-2017-2208
Disclosure Date: July 07, 2017 (last updated November 26, 2024)
Untrusted search path vulnerability in Installer of Electronic tendering and bid opening system available prior to June 12, 2017 allows an attacker to execute arbitrary code via a specially crafted executable file in an unspecified directory.
0
Attacker Value
Unknown
CVE-2017-2128
Disclosure Date: April 28, 2017 (last updated November 26, 2024)
Security guide for website operators allows remote attackers to execute arbitrary OS commands via specially crafted saved data.
0
Attacker Value
Unknown
CVE-2012-4976
Disclosure Date: December 12, 2012 (last updated October 05, 2023)
selectawasset.asp in Layton Helpbox 4.4.0 allows remote attackers to discover ODBC database credentials via an element=sys_asset_id request, which is not properly handled during construction of an error page.
0
Attacker Value
Unknown
CVE-2012-4972
Disclosure Date: December 12, 2012 (last updated October 05, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in Layton Helpbox 4.4.0 allow remote attackers to inject arbitrary web script or HTML via the (1) sys_solution_id, (2) sys_requesttype_id, (3) sys_problem_desc, (4) sys_solution_desc, (5) sys_problemsummary, (6) usr_Action_testing, (7) usr_Escalation, or (8) usr_Additional_Resources parameter to writesolutionuser.asp or the (9) sys_solution_id parameter to deletesolution.asp.
0
Attacker Value
Unknown
CVE-2012-4975
Disclosure Date: December 12, 2012 (last updated October 05, 2023)
editrequestuser.asp in Layton Helpbox 4.4.0 allows remote authenticated users to change arbitrary support-ticket data via a modified sys_request_id parameter.
0
Attacker Value
Unknown
CVE-2012-4971
Disclosure Date: December 12, 2012 (last updated October 05, 2023)
Multiple SQL injection vulnerabilities in Layton Helpbox 4.4.0 allow remote attackers to execute arbitrary SQL commands via the (1) reqclass parameter to editrequestenduser.asp; the (2) sys_request_id parameter to editrequestuser.asp; the (3) sys_request_id parameter to enduseractions.asp; the (4) sys_request_id or (5) confirm parameter to enduserreopenrequeststatus.asp; the (6) searchsql, (7) back, or (8) status parameter to enduserrequests.asp; the (9) sys_userpwd parameter to validateenduserlogin.asp; the (10) sys_userpwd parameter to validateuserlogin.asp; the (11) sql parameter to editenduseruser.asp; the (12) sql parameter to manageenduserrequestclasses.asp; the (13) sql parameter to resetpwdenduser.asp; the (14) sql parameter to disableloginenduser.asp; the (15) sql parameter to deleteenduseruser.asp; the (16) sql parameter to manageendusers.asp; or the (17) site parameter to statsrequestagereport.asp.
0
Attacker Value
Unknown
CVE-2012-4977
Disclosure Date: December 12, 2012 (last updated October 05, 2023)
Layton Helpbox 4.4.0 allows remote attackers to discover cleartext credentials for the login page by sniffing the network.
0
