CVE-2010-2544

Cross-site scripting XSS vulnerability in utilities.php in Cacti before 0.8.7g, as used in Red Hat High Performance Computing HPC Solution and other products, allows remote attackers to inject arbitrary web script or HTML via the filter parameter...

CVE-2010-2544

CVE-2010-2544 affects Cacti prior to 0.8.7g, where utilities.php fails to sanitize a filter parameter, enabling a remote attacker to inject arbitrary web script via XSS. The issue is publicly discussed across multiple advisories (Gentoo GLSA 201401-20, OpenVAS/CACTI plugins) and is associated wit...

CVE-2010-2544

Cross-site scripting XSS vulnerability in utilities.php in Cacti before 0.8.7g, as used in Red Hat High Performance Computing HPC Solution and other products, allows remote attackers to inject arbitrary web script or HTML via the filter parameter...

CVE-2010-2544

creationtimestamp| type| source ---|---|--- 2010-08-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34504...

Marcelo Costa FileServer Component Directory Traversal Vulnerability

This host is running Marcelo Costa FileServer with Windows Live Messenger and Messenger Plus! Live, and is prone to directory traversal vulnerability. OpenVAS Vulnerability Test $Id: secpodmarcelocostafileserverdirtravvuln.nasl 8193 2017-12-20 10:46:55Z cfischer $ Marcelo Costa FileServer Compone...

CVE-2009-2544

Directory traversal vulnerability in the Marcelo Costa FileServer component 1.0 for Microsoft Windows Live Messenger and Messenger Plus! Live MPL allows remote authenticated users to list arbitrary directories and read arbitrary files via a .. dot dot in a pathname...

CVE-2009-2544

Marcelo Costa FileServer Component Directory Traversal Vulnerability (CVE-2009-2544) affects Marcelo Costa FileServer 1.0 used with Windows Live Messenger and Messenger Plus! Live. The vulnerability allows remote authenticated users to enumerate arbitrary directories and read arbitrary files thro...

CVE-2007-2544

The CVE-2007-2544 entry affects PHP TopTree BBS versions up to 2.0.1a, with a remote file inclusion in templates/default/tpl_message.php. The underlying issue allows an attacker to supply a URL in the right_file parameter and cause the application to execute remote PHP code, enabling arbitrary co...

CVE-2004-2544

The CVE-2004-2544 entry concerns Secure Computing Corporation Sidewinder G2 6.1.0.01. The Admin Console exports private keys when exporting firewall certificates, potentially exposing sensitive information. Affected component: Admin Console; vulnerability: exporting private keys. Impact described...

CVE-2005-2544

The CVE-2005-2544 entry concerns Comdev eCommerce 3.0, where a PHP remote file inclusion flaw in config.php allows an attacker to execute arbitrary PHP code via path[docroot]. This is evidenced by multiple sources (NVD/CVE records and a Nessus plugin) describing remote code execution possibilitie...