OSVDB: Open Sourced Vulnerability Database

Creditee: Nahuel Grisolia

Known Contact Information:

(as of 2009-12-16)
(as of 2010-04-21)

Known Affiliations:

CYBSEC S.A. Security Systems (as of 2009-12-16)
Bonsai Information Security (as of 2010-04-21)

Disclosed Vulnerabilities (8):

Disc. Date	OSVDB ID	CVEID	Title
2012-04-06	80980		Dolibarr ERP/CRM admin/tools/export.php Remote Command Execution
2010-12-03	69590	2010-4297	VMware Tools Update Guest System Unspecified Arbitrary Command Injection
2010-10-13	70076	2010-3582	Oracle VM ovs-agent XML-RPC Multiple Function Remote Command Execution
2010-05-24	64832	2010-2116	McAfee Email Gateway Web Access admin/systemWebAdminConfig.do Direct Request Authentication Bypass
2010-04-21	63972	2010-1645	Cacti Multiple Function Hostname Editing Arbitrary Shell Command Execution
2010-04-21	63967	2010-1431	Cacti templates_export.php export_item_id Parameter SQL Injection
2010-03-17	63053		OSSIM sem/storage_graphs.php what Parameter Arbitrary Command Execution
2009-12-16	61149	2009-4375	OSSIM repository/repository_attachment.php id_document Parameter SQL Injection

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.