CVE-2015-7231

The Drupal Commerce Commonwealth (CBA) module for Drupal 7.x-1.x is affected by an input validation flaw in payment processing. Specifically, versions prior to 7.x-1.5 do not sufficiently validate gateway interactions, allowing a remote attacker to craft a URL that makes a failed payment appear v...

Commerce Commonwealth (CBA) - Moderately Critical - Insufficient Verification of API Data - SA-CONTRIB-2015-136

This module enables you to pay for items on Drupal Commerce, using Commerce Commonwealth payment gateway. The module doesn't sufficiently validate the payment under certain specific scenarios. A malicious user can modify the urls used in gateway interaction with Commbank to make a failed payment...

CVE-2014-7231

The strutils.maskpassword function in the OpenStack Oslo utility library, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 does not properly mask passwords when logging commands, which allows local users to obtain passwords by reading the log...

CVE-2014-7231

OpenStack Oslo utility library issue CVE-2014-7231 affects Cinder, Nova, and Trove before versions 2013.2.4 and 2014.1 before 2014.1.3. The strutils.mask_password() function did not properly mask passwords in command logs, enabling a local user with read access to logs to retrieve passwords. Reme...

ESRI ArcGIS未明跨站脚本漏洞

CVE ID:CVE-2013-7231 ArcGIS for Server软件平台让用户能够通过网络创建，管理和分发GIS服务，并以服务的形式支撑桌面软件应用，移动终端应用和网络地图应用等。 ArcGIS for Server移动内容服务器Mobile Content Server存在未明跨站脚本漏洞，允许通过验证的远程攻击者利用漏洞注入恶意脚本或HTML代码，当恶意数据被查看时可获取敏感信息或者劫持用户会话。 0 ESRI ArcGIS for Server 10.1 ESRI ArcGIS for Server 10.2 厂商补丁： ESRI -----...

CVE-2013-7231

Cross-site scripting XSS vulnerability in the Mobile Content Server in ESRI ArcGIS for Server 10.1 and 10.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2013-5222...

CVE-2013-7231

CVE-2013-7231 is an XSS vulnerability in ESRI ArcGIS for Server Mobile Content Server (ArcGIS for Server 10.1/10.2). Affected: Mobile Content Server; root cause: unvalidated inputs allowing remote authenticated users to inject script/HTML via unspecified vectors. Impact: potential information lea...

CVE-2013-7231

Cross-site scripting XSS vulnerability in the Mobile Content Server in ESRI ArcGIS for Server 10.1 and 10.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2013-5222...

SuSE 10 Security Update : IBM Java 1.4.2 (ZYPP Patch Number 7231)

IBM Java 1.4.2 was updated to SR13 FP6 to fix various bugs and security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. if NASLLEVEL 3000 exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid51339;...

CVE-2008-7231

CVE-2008-7231 affects Meridio Document and Records Management prior to 4.3 SR1. The vulnerability is a cross-site scripting (XSS) flaw where remote authenticated users can inject arbitrary web script or HTML via the Title field in (1) documents and (2) containers. Root cause: improper handling of...

CVE-2006-7231

CVE-2006-7231 is an SQL injection vulnerability affecting Civica Software’s display.asp component, exploitable via the Entry parameter. The data indicates remote attackers could execute arbitrary SQL commands through this parameter, leading to potential data exposure or modification. The document...