AlienVault OSSIM av-centerd Util.pm remote_task Arbitrary Command Execution (CVE-2014-5210)

The vulnerability is due to a failure to safely sanitize remotetask SOAP requests within Util.pm. this vulnerability can be exploit by sending crafted requests to the affected service. Successful exploitation could result in arbitrary command execution with root privileges...

CVE-2014-5210

CVE-2014-5210 affects the av-centerd SOAP service in AlienVault OSSIM prior to 4.7.0. The vulnerability arises from unsafe sanitization of remote_task (and get_license) SOAP requests in Util.pm, enabling remote attackers to execute arbitrary commands with root privileges. Exploitation details and...

Alienvault Open Source SIEM (OSSIM) 4.7.0 - get_license Remote Command Execution (Metasploit)

Alienvault Open Source SIEM OSSIM 4.7.0 - getlicense Remote Command Execution Metasploit require 'msf/core' require 'rexml/document' class MetasploitModule 'Alienvault OSSIM av-centerd Command Injection getlicense', 'Description' = %q This module exploits a command injection flaw found in the...

CVE-2013-5210

CVE-2013-5210 affects the ADTRAN AOS NetVanta 7100: a cross-site scripting (XSS) vulnerability in the GUI login page present before R10.8.1 that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The public sources identify the affected product as the NetVanta...

CVE-2013-5210

Cross-site scripting XSS vulnerability in the GUI login page in ADTRAN AOS before R10.8.1 on the NetVanta 7100 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-5210

Unspecified vulnerability in HP Intelligent Management Center iMC TACACS+ Authentication Manager TAM before 5.2 E0401 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, aka ZDI-CAN-1646...

CVE-2012-5210

HP iMC TACACS+ Authentication Manager (TAM) tamServletDownload vulnerability (CVE-2012-5210) is a directory-traversal flaw disclosed by ZDI-CAN-1646, enabling remote attackers to read files readable by SYSTEM and potentially disclose credentials. The issue affects TAM add-in module prior to 5.2 E...

CVE-2011-5210

CVE-2011-5210 affects Limny 3.0.0, where a directory traversal is possible in admin/preview.php via the theme parameter (encoded ..%2F) to read arbitrary files. Multiple sources (NVD, OpenVAS) confirm the vulnerability and link to Limny 3.0.0 players; OpenVAS describes it as a global directory tr...

CVE-2010-5210

CVE-2010-5210 affects Sorax Reader 2.0.3129.70. The root cause is an untrusted search path vulnerability that allows local users to gain privileges via a Trojan horse dwmapi.dll file placed in the current working directory, as demonstrated by a directory containing a .pdf file. The description in...

Zoho ManageEngine ADManager Plus Multiple Cross Site Scripting Vulnerabilities

This host is running Zoho ManageEngine ADManager Plus and is prone to multiple cross site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: gbmanageengineadmanagerplusmultxssvuln.nasl 5950 2017-04-13 09:02:06Z teissa $ Zoho ManageEngine ADManager Plus Multiple Cross Site Scripting...

ManageEngine ADManager Plus 5.2 Build 5210 - 'Operation' Cross-Site Scripting

source: https://www.securityfocus.com/bid/51893/info ManageEngine ADManager Plus is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

MapServer < 4.10.5/5.2.3/5.4.2 Integer Overflow Vulnerability

Binary data 5210.prm...

CVE-2008-5210

CVE-2008-5210 documents multiple PHP remote file inclusion vulnerabilities in PhpBlock A8.5. The affected components are PhpBlock A8.5 scripts exposing PATH_TO_CODE to remote code execution via specific files: script/init/createallimagecache.php, allincludefortick.php, test.php in script/tick/, a...

CVE-2008-5210

Multiple PHP remote file inclusion vulnerabilities in PhpBlock A8.5 allow remote attackers to execute arbitrary PHP code via a URL in the PATHTOCODE parameter to 1 script/init/createallimagecache.php, 2 allincludefortick.php and 3 test.php in script/tick/, and 4...

CVE-2008-5210

creationtimestamp| type| source ---|---|--- 2008-05-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5586...

CVE-2006-5210

Summary: CVE-2006-5210 is a directory traversal vulnerability in IronWebMail (IronMail appliance) prior to 6.1.1 HotFix-17. An unauthenticated attacker can read arbitrary files by crafting a request to the IM_FILE identifier with double-url-encoded sequences (e.g., %252e%252e/). Affected software...