OSVDB: Open Sourced Vulnerability Database

Creditee: Robert van Hamburg (xistence)

Known Contact Information:

(as of 2012-04-15)
(as of 2012-12-29)

Known Affiliations:

None at this time

Disclosed Vulnerabilities (19):

Disc. Date	OSVDB ID	Title
2013-01-02	88861	Astium VoIP PBX astiumd Service Request Parsing Remote Overflow DoS
2013-01-02	88860	Astium VoIP PBX logon.php user_name Parameter SQL Injection Authentication Bypass
2013-01-02	88859	Astium VoIP PBX File Upload Arbitrary PHP Code Execution
2012-12-29	88824	Ubiquiti AirOS test.cgi essid Parameter Remote Command Execution
2012-12-21	88665	YeaLink IP Phone SIP-T20P /yealink/bin/macd Overflow DoS
2012-12-21	88664	YeaLink IP Phone SIP-T20P Multiple Default Credentials
2012-12-21	88663	YeaLink IP Phone SIP-T20P Telnet Enabling CSRF
2012-12-21	88662	YeaLink IP Phone SIP-T20P /tmp/.htpasswd Permission Weakness Local Information Disclosure
2012-10-19	86562	ManageEngine Security Manager Plus STATE_ID/31337/jsp/xmlhttp/persistence.jsp value_1 Parameter SQL Injection
2012-10-19	86563	ManageEngine Security Manager Plus /store f Parameter Traversal Arbitrary File Access
2012-10-17	86598	ManageEngine SupportCenter Plus /jsp/UploadImage.jsp Request Parsing Arbitrary File Upload
2012-10-17	86596	ManageEngine SupportCenter Plus Edit HTML Button XSS
2012-10-17	86597	ManageEngine SupportCenter Plus HomePage.do fromCustomer Parameter XSS
2012-04-15	81160	ManageEngine SupportCenter Plus WorkOrder.do description Parameter XSS
2012-04-15	81158	ManageEngine SupportCenter Plus BackupSchedule.do backup_ids Parameter Arbitrary Backup Deletion
2012-04-15	81155	ManageEngine SupportCenter servlet/AJaxServlet countSql Parameter SQL Injection
2012-04-15	81156	ManageEngine SupportCenter Plus sd/Request.sd Multiple Parameter XSS
2012-04-15	81157	ManageEngine SupportCenter Plus RequesterDef.do Multiple Parameter XSS
2012-04-15	81159	ManageEngine SupportCenter Plus Backup Schedule Creation Backup Disclosure

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.