165 matches found
Apache OFBiz Cross Site Scripting
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Bonsai Information Security - Advisory http://www.bonsai-sec.com/research/ Multiple XSS in Apache OFBiz 1. Advisory Information Title: Multiple XSS in Apache OFBiz Advisory ID: BONSAI-2010-0103 Advisory URL:...
Apache OFBiz - Admin Creator
/ Apache OFBiz FULLADMIN Creator PoC Payload. CVE: CVE-2010-0432 By: Lucas Apa lucas -at- bonsai-sec.com . Bonsai Information Security http://www.bonsai-sec.com/ / var username = 'bonsaiUser'; var password = 'bonsaiPass'; var nodes = document.getElementsByClassName'fieldWidth300'; for var i=0;...
Apache OFBiz - Remote Execution (via SQL Execution)
/ Apache OFBiz SQL Remote Execution PoC Payload. CVE: CVE-2010-0432 By: Lucas Apa lucas -at- bonsai-sec.com . Bonsai Information Security http://www.bonsai-sec.com/ / var cmd = 'command'; var xmlhttp=false; try xmlhttp = new ActiveXObject"Msxml2.XMLHTTP"; catch e try xmlhttp = new...
CVE-2010-0432
CVE-2010-0432 describes multiple cross-site scripting (XSS) vulnerabilities in Apache OFBiz (OFBiz) 9.04 and earlier, including reflected and stored XSS in various parameters (productStoreId, partyId, start, invalid URIs, contentId, entityName, subject/content). Root cause: inputs are not properl...
CVE-2009-0432
The installation process for the File Transfer servlet in the System Management/Repository component in IBM WebSphere Application Server WAS 6.1.x before 6.1.0.19 does not enable the secure version, which allows remote attackers to obtain sensitive information via unspecified vectors...
CVE-2009-0432
The CVE-2009-0432 entry concerns IBM WebSphere Application Server (WAS) 6.1.x prior to 6.1.0.19. The File Transfer servlet in the System Management/Repository component is not configured to enable the secure version, allowing remote attackers to obtain sensitive information via unspecified vector...
FreeBSD Ports: proftpd
The remote host is missing an update to the system as announced in the referenced advisory. VID cb6c6c29-9c4f-11d8-9366-0020ed76ef5a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
CVE-2008-0432
The CVE-2008-0432 entry concerns a Cross-site Scripting (XSS) vulnerability in phpAutoVideo before or
CVE-2007-0432
BEA AquaLogic Service Bus 2.0, 2.1, and 2.5 contain a vulnerability where malformed request messages to a proxy service are not properly rejected, potentially allowing remote attackers to bypass authorization policies and route requests to back-end services or perform other unauthorized activitie...
CVE-2006-0432
CVE-2006-0432 concerns BEA WebLogic Server and WebLogic Express 9.0. The available connected documents indicate that when an Administrator uses the WebLogic Administration Console to add custom security policies, incorrect policies can be created, which prevents the server from properly protectin...
HP-UX PHCO_17601 : s700_800 11.00 libc cumulative patch
s700800 11.00 libc cumulative patch : Security Vulnerability during ftp operations. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHCO17601. The text itself is copyright C Hewlett-Packard Development Company,...
CVE-2005-0432
BEA WebLogic Server 7.0 Service Pack 5 and earlier, and 8.1 Service Pack 3 and earlier, generates different login exceptions that suggest why an authentication attempt fails, which makes it easier for remote attackers to guess passwords via brute force attacks...
CVE-2004-0432
ProFTPD 1.2.9 treats the Allow and Deny directives for CIDR based ACL entries as if they were AllowAll, which could allow FTP clients to bypass intended access restrictions...
Mandrake Linux Security Advisory : proftpd (MDKSA-2004:041)
A portability workaround that was applied in version 1.2.9 of the ProFTPD FTP server caused CIDR based ACL entries in 'Allow' and 'Deny' directives to act like an 'AllowAll' directive. This granted FTP clients access to files and directories that the server configuration may have been explicitly...
CVE-2004-0432
ProFTPD 1.2.9 contains a logic issue where CIDR-based ACL directives in Allow and Deny are treated as if they were AllowAll, effectively bypassing access restrictions. This vulnerability allows FTP clients to bypass intended controls and potentially access or modify files that should be restricte...
CVE-2003-0432
Ethereal 0.9.12 and earlier does not handle certain strings properly, with unknown consequences, in the 1 BGP, 2 WTP, 3 DNS, 4 802.11, 5 ISAKMP, 6 WSP, 7 CLNP, 8 ISIS, and 9 RMI dissectors...
CVE-2003-0432
Ethereal 0.9.12 and earlier does not handle certain strings properly, with unknown consequences, in the 1 BGP, 2 WTP, 3 DNS, 4 802.11, 5 ISAKMP, 6 WSP, 7 CLNP, 8 ISIS, and 9 RMI dissectors...
CVE-2003-0432
Ethereal (WinZip packet analyzer) 0.9.12 and earlier is affected by multiple string-handling weaknesses in several dissectors (BGP, WTP, DNS, 802.11, ISAKMP, WSP, CLNP, ISIS, RMI). The CVE-2003-0432 issue arises from improper handling of certain strings, contributing to potential memory consumpti...
CVE-2002-0432
Citadel/UX 5.90 and earlier are affected by a buffer overflow in sysdep.c (functions lprintf and cprintf). The flaw can be triggered by long HELO commands sent to the SMTP server, leading to denial of service and possibly arbitrary code execution on a remote attacker. Affected product/version: Ci...