532 matches found
ManageEngine EventLog Analyzer Default Credentials
The remote ManageEngine EventLog Analyzer web administration interface uses a known set of default credentials. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid77479; scriptversion"1.5";...
Horde <= 3.3.5 Administration Interface admin/phpshell.php PATH_INFO Parameter XSS
No description provided by source...
IP3 Networks IP3 NetAccess Appliance SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9858/info The IP3 NetAccess Appliance is reported prone to a remote SQL-injection vulnerability. This issue is due to the application's failure to properly sanitize user input. This issue may allow an attacker to gain ful...
Sun AnswerBook2 1.4.2/1.4.3/1.4.4 Administration Interface Access
No description provided by source. source: http://www.securityfocus.com/bid/1554/info A lack of authentication checks for certain scripts within the administration interface of AnswerBook2 versions 1.4.2 and prior, for Solaris, allows remote users to create administration accounts. By directly...
Cacheflow CacheOS 3.1/4.0 Web Administration Arbitrary Cached Page Code Leakage Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3841/info CacheOS is the firmware designed and distributed with CacheFlow web cache systems. It is maintained and distributed by CacheFlow. When a user connects to the system via the web administration interface on port...
G.CMS Generator SQL Injection Vulnerability
No description provided by source. 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Gcms generator SQLi Vulnerability Date : june, 21 2010 Critical Level : HIGH Vendor Url : http://www.laubrotel.com/gcms/demo/...
Zeus Web Server 4.x Admin Interface VS_Diag.CGI Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7751/info The Zeus Web Server contains a web based administration interface that is vulnerable to cross site scripting attacks. Due to insufficient sanitization of user-supplied input, it is possible for an attacker to...
Zeus Web Server 4.0/4.1 Admin Interface Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6144/info The Zeus Web Server contains a web based administration interface that is vulnerable to cross site scripting attacks. Due to insufficient sanitization of user-supplied input it is possible for an attacker to...
3Com Wireless 8760 Dual-Radio 11a/b/g PoE Multiple Security Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/32358/info 3Com Wireless 8760 Dual-Radio 11a/b/g PoE Access Point is prone to multiple security vulnerabilities, including an HTML-injection issue and an authentication-bypass issue. Successfully exploiting these issues...
Commentics 2.0 - Multiple Vulnerabilities
No description provided by source. Commentics 2.0 = Multiple Vulnerabilities Discovered by: Jean Pascal Pereira [email protected] Vendor information: Commentics is a free, advanced PHP comment script with many features. Professionally written and with open source code, its main aims are to be...
Sambar 5.x Open Proxy and Authentication Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10256/info Sambar improperly validates the IP address of an originating connection and can be used to gain access the administration interface without authorization. Once the remote attacker has gained access to the...
D-Link DSL-500T / DAP 1150 / DAP-1320 multiple security vulnerabilities
Web administration interface crossite request forgery, authentication bypass, directory traversal...
CVE-2014-0731
The administration interface in Cisco Unified Communications Manager Unified CM 10.01 and earlier allows remote attackers to bypass authentication and read Java class files via a direct request, aka Bug ID CSCum46497...
Cisco Unified Communications Manager Java Class File Availability Vulnerability
A vulnerability in the administration interface of Cisco Unified Communications Manager Cisco Unified CM could allow an unauthenticated, remote attacker to access Java class files. The vulnerability is due to insufficient authentication enforcement. An attacker could exploit this vulnerability by...
Cisco Unified Communications Manager Arbitrary File Read Vulnerability
A vulnerability in the bulk administration interface of Cisco Unified Communications Manager UCM could allow an authenticated, remote attacker to read arbitrary files from the underlying file system. The vulnerability is due to insufficient input validation. An attacker could exploit this...
HP Intelligent Management Center Web Administration Interface Detection
Binary data hpimcwebinterfacedetect.nbin...
Cisco Identity Services Engine File Space Denial of Service Vulnerability
A vulnerability in the file upload management of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to upload multiple files to a specific location of the filesystem and exhaust disk space. The vulnerability is due to insufficient management of filesystem free space...
CVE-2013-5540
The file-upload feature in Cisco Identity Services Engine ISE allows remote authenticated users to cause a denial of service disk consumption and administration-interface outage by uploading many files, aka Bug ID CSCui67519...
Unrestricted file upload
The file-upload feature in Cisco Identity Services Engine ISE allows remote authenticated users to cause a denial of service disk consumption and administration-interface outage by uploading many files, aka Bug ID CSCui67519...
CVE-2013-5540
CVE-2013-5540 affects Cisco Identity Services Engine (ISE) file-upload management. The issue allows an authenticated remote attacker to upload multiple files, exhausting disk space and causing denial of service by making the administration interface unresponsive. Root cause is insufficient manage...