bugtraq - New vulnerability in Xerox Fiery Webtools

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-Id: <E5599329-4CCD-498B-83BB-5739A8C35486@fe.up.pt>
Date: Tue, 3 Nov 2009 18:35:36 +0000
From: Bernardo Luis <bernardo@...up.pt>
To: bugtraq@...urityfocus.com
Subject: New vulnerability in Xerox Fiery Webtools

Hello i am from portugal and i would like to report a new  
vulnerability in Xerox Fiery Webtools. The probleam is in /wt3/ 
summary.php?select= if you and ' you have the possibility to exploit  
this condition to inject SQL code.

Already have contact the vendor

best regards

Bernardo Trigo

Qualidade e Segurança
Centro de Informática Prof. Correia de Araújo (CICA)
Faculdade de Engenharia da Universidade do Porto (FEUP)

AVISO LEGAL

Esta mensagem é confidencial e dirigida apenas ao destinatário. Se a  
recebeu por erro solicitamos que o comunique ao remetente e a elimine  
assim como qualquer documento anexo. Não há renúncia à  
confidencialidade nem a nenhum privilégio devido a erro de transmissão.
Qualquer opinião expressa nesta mensagem pertence unicamente ao autor  
remetente, e não representa necessariamente a opinião a não ser que  
expressamente se diga que o remetente está autorizado para o efectuar.

DISCLAIMER

This message is confidential and intended exclusively for the  
addressee. If you received this message by mistake please inform the  
sender and delete the message and attachments. No confidentiality nor  
any privilege regarding the information is waived or lost by any  
mistransmission.
Any views or opinions contained in this message are solely those of  
the author, and do not necessarily represent , unless specifically  
stated and the sender is authorized to do so.