CVE-2012-4688

CVE-2012-4688 affects i-GEN opLYNX Central software prior to version 2.01.9. The vulnerability is an authentication bypass in the Central application that can be triggered by the attacker bypassing JavaScript in the browser, enabling remote access to configuration settings and possibly other info...

CVE-2012-4688 I-GEN opLYNX Central Authentication Bypass

The Central application in i-GEN opLYNX before 2.01.9 allows remote attackers to bypass authentication via vectors involving the disabling of browser JavaScript support...

Mozilla Firefox Cache Objects History Enumeration Weakness Vulnerability (Windows)

The host is installed with Mozilla Firefox and is prone to cache objects history enumeration weakness vulnerability. OpenVAS Vulnerability Test $Id: gbmozillafirefoxcacheobjenumweaknessvulnwin.nasl 7019 2017-08-29 11:51:27Z teissa $ Mozilla Firefox Cache Objects History Enumeration Weakness...

Mozilla Firefox Cache Objects History Enumeration Weakness Vulnerability - Mac OS X

Mozilla Firefox is prone to cache objects history enumeration weakness vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2010-4688

Cisco ASA 5500 series devices (pre-8.3(2)) are affected by CVE-2010-4688 due to an issue in the SIP inspection feature that can cause a device crash when processing many SIP calls. The vulnerability affects ASA firmware versions prior to 8.3(2). The root cause is described as an unspecified vulne...

Microsoft Services - 'nwapi32.dll' (MS06-066) (Metasploit)

$Id: ms06066nwapi.rb 10150 2010-08-25 20:55:37Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Microsoft Services - 'nwwks.dll' (MS06-066) (Metasploit)

$Id: ms06066nwwks.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

CVE-2006-4688

creationtimestamp| type| source ---|---|--- 2010-05-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16369 2010-08-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16373 2018-05-29 15:50:33+00:00| seen|...

CVE-2009-4688

Multiple XSS vulnerabilities in index.php of a PHP Shopping Cart Selling Website Script allow remote attackers to inject arbitrary script/HTML via the txtkeywords and cid parameters. Affected: index.php in the PHP Shopping Cart Selling Website Script; root cause: improper handling of user-supplie...

Microsoft Services MS06-066 nwapi32.dll

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Microsoft...

Microsoft Services MS06-066 nwwks.dll

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Microsoft...

CVE-2009-4688

creationtimestamp| type| source ---|---|--- 2009-08-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34710...

GLSA-200812-07 : Mantis: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200812-07 Mantis: Multiple vulnerabilities Multiple issues have been reported in Mantis: EgiX reported that manageprojpage.php does not correctly sanitize the sort parameter before passing it to createfunction in core/utilityapi.p...

CVE-2008-4688

core/stringapi.php in Mantis before 1.1.3 does not check the privileges of the viewer before composing a link with issue data in the source anchor, which allows remote attackers to discover an issue's title and status via a request with a modified issue number...

Immunity Canvas: MANTIS113

Name| mantis113 ---|--- CVE| CVE-2008-4688 Exploit Pack| CANVAS Description| Mantis BugTracker = 1.1.3 Remote Code Execution Notes| CVE Name: CVE-2008-4688 VENDOR: Mantis Repeatability: Infinite CVE Url: https://vulners.com/cve/CVE-2008-4688 References: 'None' CVSS: 5.0...

CVE-2008-4688

Vulnerability summary (CVE-2008-4688) : Mantis before 1.1.3 does not verify viewer privileges when building a link that includes issue data in the source anchor, allowing remote attackers to discover an issue’s title and status by tampering the issue number. This is documented across multiple sou...

CVE-2008-4688

core/stringapi.php in Mantis before 1.1.3 does not check the privileges of the viewer before composing a link with issue data in the source anchor, which allows remote attackers to discover an issue's title and status via a request with a modified issue number...

CVE-2007-4688

CVE-2007-4688 affects Apple Mac OS X 10.4–10.4.10. A vulnerability in the Networking component's Node Information Query allows remote attackers to obtain all host addresses, including link-local addresses, exposing information about the host. The issue is an information-disclosure flaw in the Nod...

Mac OS X < 10.4.11 Multiple Vulnerabilities (Security Update 2007-008)

The remote host is running a version of Mac OS X 10.4 which is older than version 10.4.11 or a version of Mac OS X 10.3 which does not have Security Update 2007-008 applied. This update contains several security fixes for the following programs : - Flash Player Plugin - AppleRAID - BIND - bzip2 -...

Microsoft Netware Client Service Memory Corruption (MS06-066; CVE-2006-4688)

Client Services for NetWare CSNW provides a Windows workstation with access to NetWare file, print, and directory services. This gives users the ability to store and retrieve documents from NetWare file servers, print to NetWare print queues, and log on to Novell Directory Services NDS. By...