Microsoft .NET Framework Chart Control Information Disclosure Vulnerability (2567943)

This host is missing an important security update according to Microsoft Bulletin MS11-066. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Tecwyn Thomas SQL Injection

|=----=----=----=----=----=--------=| | | | /\ /\ \ /\ /\ \ | | //\ /\ \ \L\ \ \ \ \ Turki$ hackers | | \ \ \ \ \ '\ \ \ | | \ \ \ \ \ \L\ \ \ \ \ \ | | \ \ \ / \ \ \ | | // // //// | | | | | |=----=----=----=----=----=--------=|...

Microsoft .NET Framework Chart Control Information Disclosure Vulnerability (2567943)

This host is missing an important security update according to Microsoft Bulletin MS11-066. OpenVAS Vulnerability Test $Id: secpodms11-066.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft .NET Framework Chart Control Information Disclosure Vulnerability 2567943 Authors: Sooraj KS Copyright: Copyrig...

CVE-2011-1977

The ASP.NET Chart controls in Microsoft .NET Framework 4, and Chart Control for Microsoft .NET Framework 3.5 SP1, do not properly verify functions in URIs, which allows remote attackers to read arbitrary files via special characters in a URI in an HTTP request, aka "Chart Control Information...

Design/Logic Flaw

Microsoft .NET Framework 2.0 SP2, 3.5.1, and 4 does not properly validate the System.Net.Sockets trust level, which allows remote attackers to obtain sensitive information or trigger arbitrary outbound network traffic via 1 a crafted XAML browser application aka XBAP, 2 a crafted ASP.NET...

Information disclosure

The ASP.NET Chart controls in Microsoft .NET Framework 4, and Chart Control for Microsoft .NET Framework 3.5 SP1, do not properly verify functions in URIs, which allows remote attackers to read arbitrary files via special characters in a URI in an HTTP request, aka "Chart Control Information...

CVE-2011-1978

Microsoft .NET Framework 2.0 SP2, 3.5.1, and 4 does not properly validate the System.Net.Sockets trust level, which allows remote attackers to obtain sensitive information or trigger arbitrary outbound network traffic via 1 a crafted XAML browser application aka XBAP, 2 a crafted ASP.NET...

CVE-2011-1977

CVE-2011-1977 describes an information-disclosure vulnerability in Microsoft Chart Control used by ASP.NET Chart controls in .NET Framework 4 and Chart Control for .NET Framework 3.5 SP1. The issue arises from improper verification of functions within URIs, enabling a remote attacker to read arbi...

CVE-2011-1977

The ASP.NET Chart controls in Microsoft .NET Framework 4, and Chart Control for Microsoft .NET Framework 3.5 SP1, do not properly verify functions in URIs, which allows remote attackers to read arbitrary files via special characters in a URI in an HTTP request, aka "Chart Control Information...

Hugetech SQL Injection

|=----=----=----=----=----=--------=| | | | /\ /\ \ /\ /\ \ | | //\ /\ \ \L\ \ \ \ \ Turki$ hackers | | \ \ \ \ \ '\ \ \ | | \ \ \ \ \ \L\ \ \ \ \ \ | | \ \ \ / \ \ \ | | // // //// | | | | | |=----=----=----=----=----=--------=|...

Microsoft ASP.NET Chart Control Information Disclosure (MS11-066; CVE-2011-1977)

An information disclosure vulnerability has been reported in Microsoft Chart Controls. Chart Controls is a chart creation tool which enables users to create charts within ASP.NET pages. A remote attacker could exploit this vulnerability to retrieve any file from an affected ASP.NET page. This is ...

Microsoft .NET Framework Chart Control Information Disclosure Vulnerability

Description The Microsoft .NET Framework is prone to a remote information-disclosure vulnerability. Attackers can exploit this issue to gain access to sensitive information that may aid in further attacks. Attackers can exploit this issue by submitting a specially crafted request to a vulnerable...

Community Server - Stored Cross-Site Scripting in User's Signature

Community Server - Stored Cross-site Scripting in user's signature. - Product description: Community Server is a communities and collaboration web application developed by Telligent. It uses ASP.NET platform C and Microsoft SQL Server database. From it's 5.0 version, the software was renamed to...

Telligent Community Server 5.x Cross Site Scripting

Editor's note: 4 Advisories are grouped together here. ======================================================================= Community Server - Stored Cross-site Scripting in user's signature. - Product description: Community Server is a communities and collaboration web application developed b...

YxShop easy to shopping Mall fckeditor upload vulnerability-vulnerability warning-the black bar safety net

YxShop 是 国内 首家 ASP.NET 免费 开源 商城 购物 系统 是 易 想 团队 自主 研发 的 基于 Asp.Net+C+SQL B2C online store system, with open source, high-speed, stability, security and other characteristics, can be free to add channels, as long as understood website General knowledge of webmasters can easily use the easy to Mall...

YxShop易想购物商城4.7.1版本任意文件上传漏洞

简要描述： 这个号称中国首家ASP.NET免费开源商城购物系统。最新版本是4.7，竟然采用2.4版本以下的fckeditor编辑器。所以可以直接上传任意文件。 详细说明： 其他版本我没测试，估计也是一样的问题 http://127.0.0.1/controls/fckeditor/editor/filemanager/browser/default/browser.html?Type=../&Connector=connectors/aspx/connector.aspx 跳转到网站根目录上传任意文件。 漏洞证明：...

JVN#87908726: ASP.NET vulnerable to cross-site scripting

ASP.NET contains an issue in the handling of session ID's in mobile devices. When "Mobile Controls" are used in ASP.NET to develop web applications for mobile devices, the application may contain a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web...

Ferdows CMS 9.0.5 / Ferdows CMS Pro 1.1.0 SQL Injection / XSS

www.BugReport.ir AmnPardaz Security Research Team Title: Ferdows CMS Pro =1.1.0 and Ferdows CMS =9.0.5 Multiple Vulnerabilities Vendor: www.fcms.ir Exploit: Available Vulnerable Version: 1.1.0 Pro & 9.0.5 CMS Impact: Medium Original Advisory: http://www.bugreport.ir/index77.htm Fix: N/A 1...

Hishop 5.4&5.4.1 SQL injection vulnerability in the EXP-bug warning-the black bar safety net

Hishop online store system V5. 4 The official version is that the Maritime network has the property of self-developed WEB-based applications in the B/S architecture of a B2C online store system, mainly for enterprises and large and medium-sized network operators to provide the best protection, to...

CVE-2011-0664

Microsoft .NET Framework 2.0 SP1 and SP2, 3.5 Gold and SP1, 3.5.1, and 4.0, and Silverlight 4 before 4.0.60531.0, does not properly validate arguments to unspecified networking API functions, which allows remote attackers to execute arbitrary code via 1 a crafted XAML browser application aka XBAP...