APC PowerChute Network Shutdown XSS

Digital Security Research Group DSecRG Advisory DSECRG-09-009 ------------------link to original advisory -------------------------- http://www.dsecrg.com/pages/vul/show.php?id=82 Application: APC PowerChute Network Shutdown's Web Interface Vendor URL: http://www.apc.com/ Bug: XSS/Response...

[Full-disclosure] APC PowerChute Network Shutdown 2.21 is vulnerable to directory transversal

Synopsis: APC PowerChute Network Shutdown 2.21 is vulnerable to directory transversal Background: APC PowerChute Network Shutdown is used to perform graceful shutdowns of network servers from one main server. Affected Versions: = 2.21 build 116 Description: APC PowerChute Network Shutdown is...

CVE-2005-4326: Undefined Security Weakness

The web interface for American Power Conversion APC PowerChute Network Shutdown performs all communication in cleartext base64-encoded, which allows remote attackers to sniff authentication credentials...