Cross site scripting

Cross-site scripting XSS vulnerability in Ipswitch WSFTP allows remote attackers to inject arbitrary web script or HTML via arguments to a valid command, which is not properly handled when it is displayed by the view log option in the administration interface. NOTE: this can be leveraged to creat...

CVE-2007-4555

CVE-2007-4555 describes a cross-site scripting (XSS) vulnerability in Ipswitch WS_FTP's administration interface. The issue occurs when arguments to a valid command are not properly sanitized and are displayed by the view log option, enabling an attacker to inject arbitrary web script or HTML. Th...

CVE-2007-4529

The WebAdmin interface in TeamSpeak Server 2.0.20.1 allows remote authenticated users with the ServerAdmin flag to assign Registered users certain privileges, resulting in a privilege set that extends beyond that ServerAdmin's own servers, as demonstrated by the 1 AdminAddServer, 2...

Design/Logic Flaw

The administration interface in the Planet VC-200M VDSL2 router allows remote attackers to cause a denial of service administration interface outage via an HTTP request without a Host header...

Planet VC-200M DSL router DoS

Inaccessible administration interface on HTTP GET request with missed Host: header...

Planet VC-200M

Hello 3APA3A! Вот багу нашел, вендор откровенно тупит, похоже не хочет возится с прошивкой, по сему просьба опубликовать, может зачешутся... Planet VC-200M VDSL2 router Built in HTTP-server failure, if "Host:" header absent in HTTP-query. The further remote administration is impossible. Встроенны...

Command injection

The Command Line Interface CLI, aka Adonis Administration Console, on the BlueCat Networks Adonis DNS/DHCP appliance 5.0.2.8 allows local admin users to gain root privileges on the underlying operating system via shell metacharacters in a command...

CVE-2007-4390

The Command Line Interface CLI, aka Adonis Administration Console, on the BlueCat Networks Adonis DNS/DHCP appliance 5.0.2.8 allows local admin users to gain root privileges on the underlying operating system via shell metacharacters in a command...

CVE-2007-4390

The CVE-2007-4390 issue affects BlueCat Networks Adonis DNS/DHCP appliance (CLI/Adonis Administration Console) version 5.0.2.8. The vulnerability allows local admin users to gain root privileges on the underlying OS by injecting shell metacharacters in a command. Documents confirm the affected co...

Diamondback T4nk on hand to teach you hand off dove gray 2 0 0 7 Beta 2 to the latest version-bug warning-the black bar safety net

Article title】: Diamondback T4nk on hand to teach you hand off dove gray 2 0 0 7 Beta 2 to the latest version 【Author】: T4nk 【Author the mailbox】: [email protected] 【Author of the Home button: http://www.upx.com.cn 【Software name】: dove gray 2 0 0 7 Beta 2 【Size】: 1.71 M 【Shell】: ASProtect 1.22 - 1.2...

CVE-2007-4309

CVE-2007-4309 affects IBM Lotus Notes 5.x through 7.0.2. The description states that user‑assisted remote authenticated administrators can obtain a cleartext notes.id password by setting notes.ini (1) KFM_ShowEntropy and (2) Debug_Outfile, making this a vulnerability separate from CVE-2005-2696. ...

CVE-2007-4159

index.html in the HTTP administration interface in certain daemons in TIBCO Rendezvous RV 7.5.2 allows remote attackers to obtain sensitive information, such as a user name and IP addresses, via a direct request...

Design/Logic Flaw

index.html in the HTTP administration interface in certain daemons in TIBCO Rendezvous RV 7.5.2 allows remote attackers to obtain sensitive information, such as a user name and IP addresses, via a direct request...

CVE-2007-4017

CVE-2007-4017 describes a CSRF vulnerability in the web-based administration console of Citrix Access Gateway prior to firmware 4.5.5. The issue allows remote attackers to perform certain configuration changes as administrators due to insufficient CSRF protections in the management interface. The...

CVE-2007-4017

Cross-site request forgery CSRF vulnerability in the web-based administration console in Citrix Access Gateway before firmware 4.5.5 allows remote attackers to perform certain configuration changes as administrators...

Trend Micro OfficeScan multiple security vulnerabilities

Unauthorized access to administration interface, buffer overflow on session cookie parsing...

CVE-2007-3727

Multiple unspecified vulnerabilities in Webmatic before 2.7 have unknown impact and attack vectors, related to the "administration area."...

Design/Logic Flaw

Multiple unspecified vulnerabilities in Webmatic before 2.7 have unknown impact and attack vectors, related to the "administration area."...

CVE-2007-3727

Multiple unspecified vulnerabilities in Webmatic before 2.7 have unknown impact and attack vectors, related to the "administration area."...

CVE-2007-3727

Technical details are not publicly provided in the supplied documents; no affected components, versions beyond "Webmatic before 2.7", or impact vectors are specified. Monitor for updates.