Xceedium Xsuite Cross-Site Scripting Vulnerability

Xceedium Xsuite is a unified identity management solution from Xceedium that provides access control, monitoring and logging capabilities for hybrid cloud environments. The solution supports access control policies based on roles or individual users. A cross-site scripting vulnerability exists in...

Fedora 22 : qemu-2.3.0-5.fc22 (2015-9601)

CVE-2015-4037: insecure temporary file use in /net/slirp.c bz 1222894 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

UBUNTU-CVE-2015-4037

The slirpsmb function in net/slirp.c in QEMU 2.3.0 and earlier creates temporary files with predictable names, which allows local users to cause a denial of service instantiation failure by creating /tmp/qemu-smb.- files before the program...

The vulnerability of the Red Hat Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the xinetd-2.3.0 package of the Red Hat Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

Radexscript CMS 'SEARCH_TERMS' Parameter SQL Injection Vulnerability

Redaxscript is a free content management system CMS based on PHP and MySQL. The system is mainly used for small businesses and private site builders. A SQL injection vulnerability exists in the 'searchpost' function in the includes/search.php script in Redaxscript versions prior to 2.3.0. A remot...

Sql injection

SQL injection vulnerability in the searchpost function in includes/search.php in Redaxscript before 2.3.0 allows remote attackers to execute arbitrary SQL commands via the searchterms parameter...

Cybozu Remote Service Manager Denial of Service Vulnerability

Cybozu Remote Service Manager is Cybozu's remote service management software for accessing Cybozu's internal systems. A security vulnerability exists in Cybozu Remote Service Manager version 2.3.0 and earlier, and version 3.x to 3.1.2. A remote attacker can exploit the vulnerability to cause a...

CVE-2014-6635

CVE-2014-6635 affects Exponent CMS 2.3.0, exposing a cross-site scripting (XSS) flaw in the src parameter of the search action to index.php. The vulnerability allows remote attackers to inject arbitrary web script or HTML. CVSS v2 base score is 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N). Exploitation statu...

CVE-2014-6635

Cross-site scripting XSS vulnerability in Exponent CMS 2.3.0 allows remote attackers to inject arbitrary web script or HTML via the src parameter in the search action to index.php...

CVE-2014-1829

Requests aka python-requests before 2.3.0 allows remote servers to obtain a netrc password by reading the Authorization header in a redirected request...

CVE-2014-1830

Requests aka python-requests before 2.3.0 allows remote servers to obtain sensitive information by reading the Proxy-Authorization header in a redirected request...

Design/Logic Flaw

Requests aka python-requests before 2.3.0 allows remote servers to obtain sensitive information by reading the Proxy-Authorization header in a redirected request...

Exponent CMS 2.3.0 Cross Site Scripting

Title: exponent-2.3.0 CMS index.php POST Reflected XSS Severity: High CVE-ID: To Be Assigned Release Date: 20 September 2014 Author: Kenneth F. Belva Websites: http://silverbackventuresllc.com http://xssWarrior.com http://securitymaverick.com Twitter: @infosecmaverick Contact: Please use website...

FoxPlayer 2.3.0 (.m3u) Buffer Overflow Vulnerability

No description provided by source. !/usr/bin/perl Title: FoxPlayer Version 2.3.0 .m3u Local BOF PoC Download: http://www.foxmediatools.com/products/foxplayer.html Tested on WinXP Pro SP2 Author: Anastasios Monachos secuid0 - anastasiosmatgmaildotcom Greetz: offsec and inj3ct0r teams my $junk= \x4...

Finecms 2.3.0 /search_model.php SQL注入漏洞

No description provided by source...

FineCMS最新版SQL注入

简要描述： finecms最新版2.3.0（2014年4月18号更新）SQL注入 详细说明： finecms最新版2.3.0，官方2014年4月18号更新。 某处存在SQL注入，无需登陆，可直接注入获取管理员账号。 文件：FineCMS v2.3.0/shop/controllers/search.php / 搜索 / public function index parent::search; 进入search，文件/FineCMS v2.3.0/dayrui/core/DModule.php： / 模块内容搜索页 / protected function search...

Ecmall 2.3.0本地文件包含漏洞

简要描述： 文件包含，受到gpc和php版本限制 详细说明： 漏洞文件：admin/app/plugin.app.php 思路来源于： WooYun: Ecmall 2.3 File Inclusion Vulnerability（鸡肋） function getplugininfo$id //id参数存在文件包含漏洞 $plugininfopath = ROOTPATH . '/external/plugins/' . $id . '/plugin.info.php'; return include$plugininfopath;...

CVE-2012-6608

Cross-site scripting XSS vulnerability in xmlservices/Ebook.php in Elastix 2.3.0 allows remote attackers to inject arbitrary web script or HTML via the Page parameter...

CVE-2012-6608

CVE-2012-6608 is a cross-site scripting (XSS) vulnerability in Elastix 2.3.0 affecting xmlservices/E_book.php, exploitable via the Page parameter. The issue is documented across multiple feeds: Elastix 2.3.0 E_book.php XSS (NVD/Red Hat/CVE lists) and OpenVAS summaries. Affected component is the w...

CVE-2013-2061

The openvpndecrypt function in crypto.c in OpenVPN 2.3.0 and earlier, when running in UDP mode, allows remote attackers to obtain sensitive information via a timing attack involving an HMAC comparison function that does not run in constant time and a padding oracle attack on the CBC mode cipher...