CVE-2013-6037

Aker Secure Mail Gateway

Aker Secure Mail Gateway "msg_id"跨站脚本漏洞

CVE ID：CVE-2013-6037 Aker Secure Mail Gateway是一款邮件网关解决方案。 由于通过"msgid" GET参数传递到webgui/cf/index.php的输入在返回用户前未能正确过滤，攻击者可以利用漏洞在受影响站点上下文的用户浏览器会话中执行任意HTML和脚本代码。 0 Aker Secure Mail Gateway =2.5.2 厂商补丁： Aker ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.aker.com.br/atualizacoes-asmg?fieldtipovalue=A...

Debian DSA-2591-1 : mahara - several vulnerabilities

Multiple security issues have been found in Mahara, an electronic portfolio, weblog, and resume builder, which can result in cross-site scripting, clickjacking or arbitrary file execution. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

CVE-2012-6037

Multiple cross-site scripting XSS vulnerabilities in Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4, and other versions including 1.2, allow remote attackers to inject arbitrary web script or HTML via a CSV header with "unknown fields," which are not properly handled in error messages in the 1...

CVE-2012-6037

CVE-2012-6037 affects Mahara installations vulnerable to cross-site scripting via a CSV header with “unknown fields” in error messages during bulk user, group, and group member uploads. Affected versions include Mahara 1.2 and 1.4.x before 1.4.5, and 1.5.x before 1.5.4. The root cause is improper...

CVE-2008-6037

CVE-2008-6037 describes an SQL injection in the AvailScript Article Script, specifically in the file/view component view.php, exploitable via the vulnerable parameter v. The root cause is insufficient input validation/sanitization allowing an attacker to inject SQL commands, enabling an attacker ...

NetScaler Web Management 'CVE-2007-6037' XSS Vulnerability - Active Check

The remote Citrix NetScaler web management interface is susceptible to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2008 nnposter Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2007-6037

CVE-2007-6037 corresponds to a cross-site scripting (XSS) vulnerability in Citrix NetScaler 8.0 build 47.8, specifically affecting the web management interface via ws/generic_api_call.pl and the standalone parameter (and other unspecified params). OpenVAS entries describe the NetScaler Web Manage...

CVE-2006-6037

The CVE-2006-6037 entry describes multiple XSS vulnerabilities in Dan Jensen Travelsized CMS 0.4.1 and earlier, exploitable via index.php parameters (page, page_id, language). The underlying issue is reflected in the provided description; no exploitation details or exact root cause are given beyo...