JBoss Application Server may not properly restrict access to the administrative interface

Overview The JBoss Application Server may allow unauthenticated, remote access to the administrative console. Description JBoss is an open source application server implemented in Java. Because it is Java-based, JBoss can be used on any operating system that supports Java. JBoss servers can be...

Cisco VPN Concentrator Administrative Interface Detection

Binary data 3913.prm...

RaidenHTTPD 1.1.49 (SoftParserFileXml) Remote Code Execution Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? printr' ----------------------------------------------------------------------------- RaidenHTTPD/1.1.49 remote commands execution exploit by rgod [email protected] site: http://retrogod.altervista.org dork:...

CVE-2006-5175

CVE-2006-5175 refers to a CSRF vulnerability in the administrative web interface of Buffalo TeraStation HD-HTGL. The flaw affects firmware versions prior to 2.05 beta 1, allowing remote attackers to cause configuration changes or data deletion via unspecified vectors when an administrator is auth...

Cisco Call Manager (VoIP) Administrative Interface Detection

Binary data 3770.prm...

Asterisk VoIP Administrative Interface Detection

Binary data 3769.prm...

RaidenHTTPD 1.1.49 (SoftParserFileXml) Remote Code Execution Expl

Exploit for unknown platform in category remote exploits ==================================================================== RaidenHTTPD 1.1.49 SoftParserFileXml Remote Code Execution Exploit ==================================================================== !/usr/bin/php -q -d shortopentag=on...

RaidenHTTPD 1.1.49 - SoftParserFileXml Remote Code Execution

RaidenHTTPD 1.1.49 - SoftParserFileXml Remote Code Execution !/usr/bin/php -q -d shortopentag=on ? printr' ----------------------------------------------------------------------------- RaidenHTTPD/1.1.49 remote commands execution exploit by rgod [email protected] site:...

CVE-2006-3907

Siemens SpeedStream 2624 allows remote attackers to cause a denial of service device hang by sending a crafted packet to the web administrative interface...

Multiple Cisco Security Monitoring, Analysis and Response System security vulnerabilities

Default preconfigured Oracle databse account, JBoss code execution, multiple administrative interface code executions...

CVE-2006-2830

The CVE-2006-2830 entry describes a buffer-overflow vulnerability in the HTTP administrative interface of TIBCO Rendezvous before 7.5.1, TIBCO Runtime Agent (TRA) before 5.4, and Hawk before 4.6.1. Remote attackers could trigger a denial of service and possibly execute arbitrary code via the HTTP...

[SA20067] ManageEngine OpManager "searchTerm" Cross-Site Scripting

TITLE: ManageEngine OpManager "searchTerm" Cross-Site Scripting SECUNIA ADVISORY ID: SA20067 VERIFY ADVISORY: http://secunia.com/advisories/20067/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: ManageEngine OpManager 6.x http://secunia.com/product/9902/...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in phpstatus 1.0 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors in the administrative interface...

CVE-2006-0571

Multiple cross-site scripting XSS vulnerabilities in phpstatus 1.0 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors in the administrative interface...

CVE-2006-0570

Multiple SQL injection vulnerabilities in phpstatus 1.0, when gpcmagicquotes is disabled, allow remote attackers to execute arbitrary SQL commands and bypass authentication via 1 the username parameter in check.php and 2 unknown attack vectors in the administrative interface...

CVE-2006-0571

Multiple cross-site scripting XSS vulnerabilities in phpstatus 1.0 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors in the administrative interface...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Easy CMS allow remote attackers to inject arbitrary web script or HTML via 1 unknown attack vectors in the administrative interface and 2 input fields of the contact form...

CVE-2005-4658

CVE-2005-4658 describes multiple cross-site scripting (XSS) vulnerabilities in ASP-Programmers.com ASPKnowledgebase. Affected component: the administrative interface of ASPKnowledgebase. Root cause: unspecified XSS flaws that allow remote attackers to inject arbitrary scripts or HTML via unknown ...

CVE-2005-4658

Multiple cross-site scripting XSS vulnerabilities in ASP-Programmers.com ASPKnowledgebase allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors in the administrative interface...

CVE-2005-4658

Multiple cross-site scripting XSS vulnerabilities in ASP-Programmers.com ASPKnowledgebase allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors in the administrative interface...