MantisBT 2.2.x < 2.2.1 Multiple XSS

Binary data 700004.prm...

CVE-2017-6799

A cross-site scripting XSS vulnerability in viewfilterspage.php in MantisBT before 2.2.1 allows remote attackers to inject arbitrary JavaScript via the 'viewtype' parameter...

CVE-2017-6799

CVE-2017-6799 is an XSS vulnerability in MantisBT prior to version 2.2.1. The vulnerability resides in view_filters_page.php and allows an attacker to inject arbitrary JavaScript via the 'view_type' parameter. Various connected sources confirm the affected product is MantisBT and cite the same ve...

CVE-2014-6799

The Investigation Tool (gov.ca.post.lp.itool) 1.0.0 for Android is affected. The root cause is that the app does not verify X.509 certificates from SSL servers, which enables man‑in‑the‑middle attackers to spoof servers and access sensitive information via a crafted certificate. The connected doc...

CVE-2013-6799

CVE-2013-6799 affects macOS/HFS+ where the OS allowed creating hard links to directories due to an incomplete fix for CVE-2010-0105. Local attackers can trigger memory corruption or a denial of service by crafting hard links to directories (DoS/panic scenarios described in PoC). Affected: macOS/m...

National Instruments Device Detection

Binary data 6799.prm...

CVE-2008-6799

CVE-2008-6799 affects FlashChat 5.0.8. The vulnerability allows remote attackers to bypass the role filter mechanism and gain administrative privileges by setting the s parameter to "7" in connection.php. Public sources (e.g., NVD/NIST, OpenVAS NASL) corroborate a security bypass in FlashChat’s r...

Gentoo Security Advisory GLSA 200701-23 (cacti)

The remote host is missing updates announced in advisory GLSA 200701-23. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200701-23 (cacti)

The remote host is missing updates announced in advisory GLSA 200701-23. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1250-1 (cacti)

The remote host is missing an update to cacti announced via advisory DSA 1250-1. It was discovered that cacti, a frontend to rrdtool, performs insufficient validation of data passed to the cmd script, which allows SQL injection and the execution of arbitrary shell commands. OpenVAS Vulnerability...

SUSE-SA:2007:007: cacti

The remote host is missing the patch for the advisory SUSE-SA:2007:007 cacti. A command injection in cmd.php in cacti was fixed, which might have allowed remote attackers to inject commands and so execute code. This issue is tracked by the Mitre CVE ID CVE-2006-6799. %NASLMINLEVEL 70300 C Tenable...

Debian DSA-1250-1 : cacti - missing input sanitising

It was discovered that cacti, a frontend to rrdtool, performs insufficient validation of data passed to the 'cmd' script, which allows SQL injection and the execution of arbitrary shell commands. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

CVE-2006-6799

SQL injection vulnerability in Cacti 0.8.6i and earlier, when registerargcargv is enabled, allows remote attackers to execute arbitrary SQL commands via the 1 second or 2 third arguments to cmd.php. NOTE: this issue can be leveraged to execute arbitrary commands since the SQL query results are...

CVE-2006-6799

SQL injection vulnerability in Cacti 0.8.6i and earlier, when registerargcargv is enabled, allows remote attackers to execute arbitrary SQL commands via the 1 second or 2 third arguments to cmd.php. NOTE: this issue can be leveraged to execute arbitrary commands since the SQL query results are...