DataTrack System Multiple Vulnerabilities

This host is running DataTrack System and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpoddatatracksystemmultvuln.nasl 5394 2017-02-22 09:22:42Z teissa $ DataTrack System Multiple Vulnerabilities Authors: Madhuri D Copyright: Copyright c 2010 SecPod,...

CVE-2010-2088

ASP.NET in Microsoft .NET 3.5 does not properly handle an unencrypted view state, which allows remote attackers to conduct cross-site scripting XSS attacks against the form control via the VIEWSTATE parameter...

CVE-2010-2088

CVE-2010-2088 : The connected sources confirm a cross-site scripting (XSS) vulnerability in Microsoft .NET Framework 3.5’s ASP.NET where an unencrypted __VIEWSTATE is not properly handled. This allows remote attackers to inject script via the ViewState parameter. Affected product/component: Micro...

Design/Logic Flaw

DataTrack System 3.5 allows remote attackers to list the root directory via a 1 /%u0085/ or 2 /%u00A0/ URI...

Design/Logic Flaw

DataTrack System 3.5 allows remote attackers to bypass intended restrictions on file extensions, and read arbitrary files, via a trailing backslash in a URI, as demonstrated by 1 web.config\ and 2 .ascx\ files...

CVE-2010-2078

DataTrack System 3.5 is affected by CVE-2010-2078, where remote attackers can cause a root-directory listing via two crafted URIs: /%u0085/ and /%u00A0/. OpenVAS entries also reference DataTrack System

DataTrack System 3.5 Cross Site Scripting

============================================================================================================ //\ /\ /\ /\ /\ /\ ///\ //\ /\ /\///\ // \ // //\ \ / //\ \ / // //\ \ /\\ \ \ \ / / / / // \ \ // // // // \ // //\ \\ \ // /// \ \ / \ / // / // / / / / / \ \ / / / ...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ToutVirtual VirtualIQ Pro 3.5 build 8691 allow remote attackers to inject arbitrary web script or HTML via the 1 addNewDept, 2 deptId, or 3 deptDesc parameter to tvserver/server/user/addDepartment.jsp; or the 4 firstName, 5 lastName, or 6 email...

Ubuntu Update for Firefox 3.5 and Xulrunner vulnerabilities USN-921-1

Ubuntu Update for Linux kernel vulnerabilities USN-921-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9211.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for Firefox 3.5 and Xulrunner vulnerabilities USN-921-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH...

KLA10106 ACE vulnerability in Cisco Secure Desktop

An improperly downloaded files verification vulnerability was found in Cisco Security Desktop. By exploiting this vulnerability malicious users can Execute Arbitrary Code. This vulnerability can be exploited from the network at a point related to Web Install via a specially designed web page...

Firefox nsTreeSelection实现释放后使用漏洞

CVE ID: CVE-2010-0175 Firefox是一款流行的开源WEB浏览器。 Firefox处理nsTreeSelection元素的特殊事件时存在释放后使用漏洞。在执行select事件时，Firefox未经检查元素之前是否已被释放便进行了访问，这可能导致执行任意代码。 Mozilla Firefox 3.5.x Mozilla Firefox 3.0.x Mozilla Thunderbird 3.0.4 Mozilla SeaMonkey 2.0.4 临时解决方法： 禁用JavaScript。 厂商补丁： Debian ------...

TugZip 3.5 Archiver - '.ZIP' File Buffer Overflow

!/usr/bin/perl Software : TugZip 3.5 .zip Author : Lincoln Assisted by : corelanc0d3r OS : Windows Tested on : XP SP3 En VirtualBox Type of vuln : SEH Greetz to : Corelan Security Team http://www.corelan.be:8800/index.php/security/corelan-team-members/ Script provided 'as is', without any warrant...

TugZip 3.5 Archiver - .ZIP File Buffer Overflow

TugZip 3.5 Archiver - .ZIP File Buffer Overflow !/usr/bin/perl Software : TugZip 3.5 .zip Author : Lincoln Assisted by : corelanc0d3r OS : Windows Tested on : XP SP3 En VirtualBox Type of vuln : SEH Greetz to : Corelan Security Team...

TugZip 3.5 (.zip) Local Buffer Overflow Exploit (SEH)

Exploit for windows platform in category local exploits ===================================================== TugZip 3.5 .zip Local Buffer Overflow Exploit SEH ===================================================== !/usr/bin/perl Software : TugZip 3.5 .zip Author : Lincoln Assisted by : corelanc0d...

Firefox 3.5 Stack Overflow Exploit

Exploit for windows platform in category local exploits ================================== Firefox 3.5 Stack Overflow Exploit ================================== !bin/ruby Exploit : Shellcode Stack Overflow Firefox 3.5 Date : 23/03/2010 Author : Whivack Gsk? Software Link :...

VMSA-2010-0005 VMware products address vulnerabilities in WebAccess

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ VMware Security Advisory Advisory ID: VMSA-2010-0005 Synopsis: VMware products address vulnerabilities in WebAccess Issue date: 2010-03-29 Updated on: 2010-03-29 initial releas...

Mozilla Firefox Unspecified Vulnerability (Mar 2010) - Windows

mozilla firefox is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-1122

Unspecified vulnerability in Mozilla Firefox 3.5.x through 3.5.8 allows remote attackers to cause a denial of service memory corruption and application crash and possibly have unknown other impact via vectors that might involve compressed data, a different vulnerability than CVE-2010-1028...

Firefox浏览器引擎远程内存破坏漏洞

BUGTRAQ ID: 38286 CVE ID: CVE-2010-0159 Firefox是一款流行的开源WEB浏览器。 Firefox浏览器引擎的layout/generic/nsBlockFrame.cpp文件中的nsBlockFrame::StealFrame 函数中存在内存破坏漏洞。用户受骗访问了恶意网页就可能触发这个漏洞，导致浏览器崩溃或执行任意代码。 Mozilla Firefox 3.5.x Mozilla Firefox 3.0.x Mozilla Thunderbird 3.0 Mozilla SeaMonkey 2.0 临时解决方法： 禁用JavaScript。...

CVE-2010-0699

CVE-2010-0699 is a cross-site scripting (XSS) vulnerability in VideoSearchScript Pro 3.5, affecting index.php where the q parameter can be used to inject arbitrary script/HTML. Exploitation is described as remote and does not require authentication, with user interaction not required. The CVSSv2 ...