MantisBT < 1.2.8 Multiple Local File Include and XSS Vulnerabilities

MantisBT is prone to multiple local file include and cross-site scripting XSS vulnerabilities. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-lat...

CVE-2011-3578

CVE-2011-3578 is a cross-site scripting (XSS) vulnerability affecting MantisBT prior to 1.2.8 . The issue is triggered via the parameter action in the script bug_actiongroup_ext_page.php, enabling remote attackers to inject arbitrary web script or HTML. The description links this to bug_actiongro...

CVE-2011-3578

Cross-site scripting XSS vulnerability in bugactiongroupextpage.php in MantisBT before 1.2.8 allows remote attackers to inject arbitrary web script or HTML via the action parameter, related to bugactiongrouppage.php, a different vulnerability than CVE-2011-3357...

Multiple Vulnerabilities in MantisBT

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in MantisBT which could be exploited to perform cross-site scripting attacks, gain access to sensitive information and compromise vulnerable system. 1 Cross-site scripting XSS vulnerabilities in MantisBT:...

CVE-2010-3578

CVE-2010-3578 concerns Oracle OpenSolaris Depot Server. The connected materials place this Vulnerability as a high-severity, remote-exploit risk affecting Oracle OpenSolaris Depot Server via network access, with CVSS v2 base score 9.0 (Attack Vector: Network; Access Complexity: Low; Authenticatio...

CVE-2009-3578

Autodesk Maya 8.0, 8.5, 2008, 2009, and 2010 and Alias Wavefront Maya 6.5 and 7.0 allow remote attackers to execute arbitrary code via a 1 .ma or 2 .mb file that uses the Maya Embedded Language MEL python command or unspecified other MEL commands, related to "Script Nodes."...

CVE-2009-3578

CVE-2009-3578 affects Autodesk Maya (versions 8.0/8.5/2008/2009/2010) and Alias Wavefront Maya 6.5–7.0. The vulnerability arises from Script Nodes that can contain MEL or Python code embedded in .ma/.mb scene files. Opening such a file can cause arbitrary code execution under the user’s privilege...

CVE-2009-3578

Autodesk Maya 8.0, 8.5, 2008, 2009, and 2010 and Alias Wavefront Maya 6.5 and 7.0 allow remote attackers to execute arbitrary code via a 1 .ma or 2 .mb file that uses the Maya Embedded Language MEL python command or unspecified other MEL commands, related to "Script Nodes."...

Autodesk Maya Script Nodes Arbitrary Command Execution

Advisory ID Internal CORE-2009-0910 1. Advisory Information Title: Autodesk Maya Script Nodes Arbitrary Command Execution Advisory Id: CORE-2009-0910 Advisory URL:http://www.coresecurity.com/content/maya-arbitrary-command-execution Date published: 2009-11-23 Date of last update: 2009-11-20 Vendor...

CVE-2009-3578

creationtimestamp| type| source ---|---|--- 2009-11-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10213...

Autodesk Maya Script - Nodes Arbitrary Command Execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Autodesk Maya Script Nodes Arbitrary Command Execution 1. Advisory Information Title: Autodesk Maya Script Nodes Arbitrary Command Execution Advisory Id: CORE-2009-09...

Autodesk Maya Script Nodes Arbitrary Command Execution

No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Autodesk Maya Script Nodes Arbitrary Command Execution 1. Advisory Information Title: Autodesk Maya Script Nodes Arbitrary Command...

Core Security Technologies Advisory 2009.0910

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Autodesk Maya Script Nodes Arbitrary Command Execution 1. Advisory Information Title: Autodesk Maya Script Nodes Arbitrary Command Execution Advisory Id: CORE-2009-09...

Autodesk Maya Script - Nodes Arbitrary Command Execution

Autodesk Maya Script - Nodes Arbitrary Command Execution -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Autodesk Maya Script Nodes Arbitrary Command Execution 1. Advisory Information Title: Autodesk Maya Script...

CVE-2008-3578

CVE-2008-3578 affects HydraIRC versions up to 0.3.164. The vulnerability is a remote NULL pointer dereference triggered by processing a long irc:// URI, leading to application crash. No exploitation details are provided beyond the URI-based trigger. The connected sources corroborate the same symp...

CVE-2008-3578

creationtimestamp| type| source ---|---|--- 2008-08-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6201...

CVE-2007-3578

The CVE-2007-3578 issue affects PHPIDS before 20070703, where improper handling of (1) arithmetic expressions and (2) unclosed comments could allow remote attackers to inject arbitrary web script. This is supported by the NVD description and mirrored across other sources in the connected document...

CVE-2006-3578

The CVE-2006-3578 issue concerns Fujitsu ServerView (versions 2.50–3.60L98 and 4.10L11–4.11L81). The connected JVN entry notes a directory traversal vulnerability that could allow a remote attacker to view specific server files. Details on affected components, root cause, exploitation vectors, or...

CVE-2005-3578

SQL injection vulnerability in ts.exe aka ts.cgi in Walla TeleSite 3.0 and earlier allows remote attackers to inject arbitrary SQL commands via the sug parameter...

CVE-2005-3578

CVE-2005-3578 affects Walla TeleSite 3.0 and earlier due to an SQL injection in ts.exe (ts.cgi) that allows remote attackers to inject arbitrary SQL via the sug parameter. The NVD entry lists a network attack vector with low complexity and no authentication, yielding partial confidentiality, inte...