Code injection

private/login.ssi in the Advanced Management Module AMM on the IBM BladeCenter, including the BladeCenter H with BPET36H 54, allows remote attackers to discover the access roles and scopes of arbitrary user accounts via a modified WEBINDEX parameter...

CVE-2009-1288

Multiple cross-site scripting XSS vulnerabilities in the Advanced Management Module AMM on the IBM BladeCenter, including the BladeCenter H with BPET36H 54, allow remote attackers to inject arbitrary web script or HTML via 1 the username in a login action or 2 the PATH parameter to...

CVE-2009-1288

Multiple cross-site scripting XSS vulnerabilities in the Advanced Management Module AMM on the IBM BladeCenter, including the BladeCenter H with BPET36H 54, allow remote attackers to inject arbitrary web script or HTML via 1 the username in a login action or 2 the PATH parameter to...

CVE-2009-1290

Multiple cross-site request forgery CSRF vulnerabilities in the web administration interface in the Advanced Management Module AMM on the IBM BladeCenter, including the BladeCenter H with BPET36H 54, allow remote attackers to hijack the authentication of administrators, as demonstrated by a...

CVE-2009-1288

The CVE-2009-1288 entry describes multiple cross-site scripting (XSS) vulnerabilities in IBM BladeCenter’s Advanced Management Module (AMM), including the BladeCenter H with BPET36H 54. The issues allow remote attackers to inject arbitrary web script or HTML via the username field during login or...

IBM BladeCenter高级管理模块跨站脚本和跨站请求伪造漏洞

BUGTRAQ ID: 34447 IBM BladeCenter是IBM的系列高性能刀片服务器。 IBM BladeCenter所使用的高级管理模块（AMM）的Web管理接口没有正确地过滤用户所提交的输入和请求。如果用户使用恶意的凭据试图登录的话，AMM会在事件日志页面记录用户所提交的凭据，之后管理员查看事件日志时就会执行所注入的内容。例如，攻击者可以使用以下用户名登录导致注入 JavaScript： /scriptscript src="//l7.fi"/scriptscript...

IBM BladeCenter Advanced Management Module multiple security vulnerabilities

Crossite scripting, information leak...

IBM Bladecenter Advanced Management Module 1.42 - Cross-Site Request Forgery

IBM Bladecenter Advanced Management Module 1.42 - Cross-Site Request Forgery source: https://www.securityfocus.com/bid/34447/info IBM BladeCenter Advanced Management Module is prone to the following remote vulnerabilities: - An HTML-injection vulnerability - A cross-site scripting vulnerability -...

IBM Bladecenter Advanced Management Module 1.42 - Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/34447/info IBM BladeCenter Advanced Management Module is prone to the following remote vulnerabilities: - An HTML-injection vulnerability - A cross-site scripting vulnerability - An information-disclosure vulnerability - Multiple cross-site request-forger...

IBM Bladecenter Advanced Management Module 1.42 - Login 'Username' Cross-Site Scripting

source: https://www.securityfocus.com/bid/34447/info IBM BladeCenter Advanced Management Module is prone to the following remote vulnerabilities: - An HTML-injection vulnerability - A cross-site scripting vulnerability - An information-disclosure vulnerability - Multiple cross-site request-forger...

Multiple vulnerabilities in third party extensions

Several vulnerabilities have been found in the following third party TYPO3 extensions: "A21glossary Advanced Output" a21glossaryadvancedoutput, "ClickStream Analyzer output" alternetcsaout, "Directory Listing" dirlisting, "Store Locator" locator, "Userdata Create/Edit" sguserdata, "Versatile...

Advanced Image Hosting (AIH) 2.3 - gal Blind SQL Injection

Advanced Image Hosting AIH 2.3 - gal Blind SQL Injection Advanced Image Hosting AIH Remote Blind SQL Injection Author : boom3rang Greetz : H!tm@N, KHG, chs, redc00de Vulnerability : Blind SQL injection Google Dork : Powered by: AIH v2.3 -------------------------------------------------- ! Product...

Advanced Image Hosting (AIH) 2.3 - 'gal' Blind SQL Injection

Advanced Image Hosting AIH Remote Blind SQL Injection Author : boom3rang Greetz : H!tm@N, KHG, chs, redc00de Vulnerability : Blind SQL injection Google Dork : Powered by: AIH v2.3 -------------------------------------------------- ! Product Name : Advanced Image Hosting ! Product Site :...

Advanced Image Hosting (AIH) 2.3 (gal) Blind SQL Injection Vuln

Exploit for unknown platform in category web applications =============================================================== Advanced Image Hosting AIH 2.3 gal Blind SQL Injection Vuln =============================================================== Advanced Image Hosting AIH Remote Blind SQL Injecti...

RedHat Update for freetype RHSA-2008:0558-01

Check for the Version of freetype OpenVAS Vulnerability Test RedHat Update for freetype RHSA-2008:0558-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for freetype FEDORA-2007-0033

Check for the Version of freetype OpenVAS Vulnerability Test Fedora Update for freetype FEDORA-2007-0033 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Sql injection

SQL injection vulnerability in search.php in WSN Guest 1.23 allows remote attackers to execute arbitrary SQL commands via the search parameter in an advanced action...

Fedora Update for awstats FEDORA-2008-7663

Check for the Version of awstats OpenVAS Vulnerability Test Fedora Update for awstats FEDORA-2008-7663 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for awstats FEDORA-2008-10962

Check for the Version of awstats OpenVAS Vulnerability Test Fedora Update for awstats FEDORA-2008-10962 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Cross site scripting

Cross-site scripting XSS vulnerability in advancedsearchresult.php in xt:Commerce 3.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the keywords parameter...