CVE-2008-6974

Multiple cross-site request forgery CSRF vulnerabilities in apply.cgi in DD-WRT 24 sp1 and earlier allow remote attackers to hijack the authentication of administrators for requests that 1 execute arbitrary commands via the pingip parameter; 2 change the administrative credentials via the...

CVE-2008-6975

Multiple cross-site request forgery CSRF vulnerabilities in apply.cgi in DD-WRT 24 sp2 allow remote attackers to hijack the authentication of administrators for requests that 1 execute arbitrary commands via the pingip parameter; 2 change the administrative credentials via the httpusername and...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in apply.cgi in DD-WRT 24 sp2 allow remote attackers to hijack the authentication of administrators for requests that 1 execute arbitrary commands via the pingip parameter; 2 change the administrative credentials via the httpusername and...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in apply.cgi in DD-WRT 24 sp1 and earlier allow remote attackers to hijack the authentication of administrators for requests that 1 execute arbitrary commands via the pingip parameter; 2 change the administrative credentials via the...

CVE-2008-6975

Multiple cross-site request forgery CSRF vulnerabilities in apply.cgi in DD-WRT 24 sp2 allow remote attackers to hijack the authentication of administrators for requests that 1 execute arbitrary commands via the pingip parameter; 2 change the administrative credentials via the httpusername and...

CVE-2008-6975

CVE-2008-6975: CSRF vulnerabilities in apply.cgi of DD-WRT 24 sp2 allow remote attackers to hijack administrator sessions by manipulating parameters (ping_ip, http_username/http_passwd, remote_management, and port-forward fields from/to/ip/pro). The issue is linked to a reportedly weak anti-CSRF ...

CVE-2008-6974

CVE-2008-6974 affects DD-WRT 24 sp1 and earlier. The vulnerability is a CSRF in apply.cgi that allows remote attackers to hijack administrator authentication and issue privileged requests via parameters such as ping_ip (arbitrary command execution), http_username/http_passwd (credential changes),...

CVE-2008-6974

Multiple cross-site request forgery CSRF vulnerabilities in apply.cgi in DD-WRT 24 sp1 and earlier allow remote attackers to hijack the authentication of administrators for requests that 1 execute arbitrary commands via the pingip parameter; 2 change the administrative credentials via the...

Sun Java System Access Manager 7.1 < Patch 2 Multiple Vulnerabilities

Binary data 5132.prm...

Joe guest(JoeKoe) CMS 4.0 background to get shell-vulnerability warning-the black bar safety net

Without any technology, purely blind Simon Joe guestJoeKoe CMS 4.0 background to get the shell. Come backstage—system administration—site configuration—site namein the site name there is written a word. ! joekoeshell1 Then by word of the link is connected. www.XXX.com/index.asp !...

Cross site scripting

Cross-site scripting XSS vulnerability in the Administration interface in Cisco Customer Response Solutions CRS before 7.01 SR2 in Cisco Unified Contact Center Express aka CCX server allows remote authenticated users to inject arbitrary web script or HTML into the CCX database via unspecified...

CVE-2009-2047

Directory traversal vulnerability in the Administration interface in Cisco Customer Response Solutions CRS before 7.01 SR2 in Cisco Unified Contact Center Express aka CCX server allows remote authenticated users to read, modify, or delete arbitrary files via unspecified vectors...

CVE-2009-2048

Cross-site scripting XSS vulnerability in the Administration interface in Cisco Customer Response Solutions CRS before 7.01 SR2 in Cisco Unified Contact Center Express aka CCX server allows remote authenticated users to inject arbitrary web script or HTML into the CCX database via unspecified...

Directory traversal

Directory traversal vulnerability in the Administration interface in Cisco Customer Response Solutions CRS before 7.01 SR2 in Cisco Unified Contact Center Express aka CCX server allows remote authenticated users to read, modify, or delete arbitrary files via unspecified vectors...

CVE-2009-2048

CVE-2009-2048 affects Cisco Unified CCX/CRS Admin pages. The stored cross-site scripting vulnerability allows authenticated users to inject JavaScript into the CCX database via the Administration interface, enabling script execution in the browser of the next authenticated user. Impact details in...

CVE-2009-2047

Cisco CVE-2009-2047 pertains to a directory traversal vulnerability in the Administration interface of Cisco Customer Response Solutions (CRS) and Cisco Unified CCX, affecting CRS before 7.0(1) SR2. The flaw allows remote authenticated users to read, modify, or delete arbitrary files on the serve...

[SECURITY] Fedora 10 Update: perl-5.10.0-73.fc10

Perl is a high-level programming language with roots in C, sed, awk and shell scripting. Perl is good at handling processes and files, and is especially good at handling text. Perl's hallmarks are practicality and efficiency. While it is used to do a lot of different things, Perl's most common...

Cisco Unified Contact Center Express multiple security vulnerabilities

Directory traversal and crossite scripting via administration page...

Vulnerabilities in Unified Contact Center Express Administration Pages

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Admin News Tools 2.5 File Download

Securitylab.ir Application Info: Name: Admin News Tools Version: 2.5 Website: http://www.adminnewstools.fr.nf Download: http://www.adminnewstools.fr.nf/zip/ANT-2.5.zip Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability...