OSVDB: Open Sourced Vulnerability Database

Creditee: Juan Manuel Garcia

Known Contact Information:

(as of 2011-04-20)

Known Affiliations:

CYBSEC S.A. Security Systems (as of 2010-10-28)

Disclosed Vulnerabilities (10):

Disc. Date	OSVDB ID	CVEID	Title
2013-02-08	90020		TP-LINK WR2543ND Multiple Administrative Function CSRF
2012-10-29	86844		Endpoint Protector /index.php/mgroup/create group[name] Parameter XSS
2012-10-29	86843		Endpoint Protector /index.php/clientdevice/create Multiple Parameter XSS
2012-10-29	86842		Endpoint Protector /index.php/clientmachine/create Multiple Parameter XSS
2011-04-20	71913	2011-0836	Oracle JD Edwards EnterpriseOne Tools Web Runtime SEC /jde/E1Menu.maf jdeowpBackButtonProtect Parameter XSS
2011-04-20	71914	2011-0836	Oracle JD Edwards EnterpriseOne Tools Web Runtime SEC /jde/E1Menu_Menu.mafService e1.namespace Parameter XSS
2011-04-20	71915	2011-0836	Oracle JD Edwards EnterpriseOne Tools Web Runtime SEC /jde/E1Menu_OCL.mafService e1.namespace Parameter XSS
2011-04-20	71916	2011-0836	Oracle JD Edwards EnterpriseOne Tools Web Runtime SEC /jde/MafletClose.mafService RENDER_MAFLET Parameter XSS
2011-04-20	71917	2011-0836	Oracle JD Edwards EnterpriseOne Tools Web Runtime SEC /jde/JASMafletMafBrowserClose.mafService jdemafjasLinkTarget Parameter XSS
2010-10-28	68924		FrontAccounting (FA) gl/inquiry/journal_inquiry Multiple Parameter SQL Injection

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.