121 matches found
CVE-2015-0489
Technical details for CVE-2015-0489 are not publicly available in the provided documents. Monitor for updates in connected sources.
CVE-2015-0489: Undefined Security Weakness
Unspecified vulnerability in the Application Management Pack for Oracle E-Business Suite component in Oracle E-Business Suite AMP 121030 and 121020 allows local users to affect confidentiality via vectors related to EBS Plugin...
phpwind background getshell-a vulnerability warning-the black bar safety net
Background upload plugin, you can upload one that contains the php Trojan phpwind standard format plug-in installation package, and getshell. 1. First make an installation package, you need to include a manifest. xml file and a php word此处 文件 名为 php.php a. the manifest. the xml is as follows: ? xm...
Zend Server 5.6.0 Script Insertion
!-- Title: Zend Server 5.6.0 Multiple Remote Script Insertion Vulnerabilities Vendor: Zend Technologies Ltd. Product web page: http://www.zend.com Affected version: Zend Server 5.6.0 Zend Optimizer+ 4.1 Zend Code Tracing 1.0 Zend Data Cache 4.0 Zend Job Queue 4.0 Zend Debugger 5.3 Zend Java Bridg...
[SECURITY] Fedora 15 Update: xulrunner-10.0.1-3.fc15
XULRunner is a Mozilla runtime package that can be used to bootstrap XUL+XP COM applications that are as rich as Firefox and Thunderbird. It provides mecha nisms for installing, upgrading, and uninstalling these applications. XULRunner a lso provides libxul, a solution which allows the embedding ...
Tembria Server Multiple Cross-Site Scripting and Information Disclosure Vulnerabilities
The host is running Tembria Server Monitor and is prone to cross-site scripting and information disclosure vulnerabilities. OpenVAS Vulnerability Test $Id: secpodtembriaservermultxssninfodiscvuln.nasl 7052 2017-09-04 11:50:51Z teissa $ Tembria Server Multiple Cross-Site Scripting and Information...
Hyperic HQ Web GUI Detection
A web-based interface for Hyperic HQ, a web- and enterprise- application management system, is running on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid45357; scriptversion"1.6"; scriptcvsdate"Date: 2019/11/25"; scriptnameenglish:"Hyperic HQ Web GUI...
CVE-2009-2907
Multiple cross-site scripting XSS vulnerabilities in SpringSource tc Server 6.0.20.B and earlier, Application Management Suite AMS before 2.0.0.SR4, Hyperic HQ Open Source before 4.2.x, Hyperic HQ 4.0 Enterprise before 4.0.3.2, and Hyperic HQ 4.1 Enterprise before 4.1.2.1 allow remote attackers t...
CVE-2009-2907
CVE-2009-2907 affects SpringSource Hyperic HQ-related products (Open Source 4.2.x and 4.1.x/4.0.x lines; Enterprise 4.0.x/4.1.x) and related components such as tc Server 6.x and AMS up to 2.0.0.SR4. Root cause: improper validation of user-supplied input leading to stored cross-site scripting via ...
CVE-2009-2907: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in SpringSource tc Server 6.0.20.B and earlier, Application Management Suite AMS before 2.0.0.SR4, Hyperic HQ Open Source before 4.2.x, Hyperic HQ 4.0 Enterprise before 4.0.3.2, and Hyperic HQ 4.1 Enterprise before 4.1.2.1 allow remote attackers t...
JDownloader download manager code execution
TCP/9666 port HTTP interface used for application management is vulnerable to form redirection attacks...
CVE-2009-2897
Multiple cross-site scripting XSS vulnerabilities in hq/web/common/GenericError.jsp in the generic exception handler in the web interface in SpringSource Hyperic HQ 3.2.x before 3.2.6.1, 4.0.x before 4.0.3.1, 4.1.x before 4.1.2.1, and 4.2-beta1; Application Management Suite AMS 2.0.0.SR3; and tc...
CVE-2009-2898
Cross-site scripting XSS vulnerability in the Alerts list feature in the web interface in SpringSource Hyperic HQ 3.2.x before 3.2.6.1, 4.0.x before 4.0.3.1, 4.1.x before 4.1.2.1, and 4.2-beta1; Application Management Suite AMS 2.0.0.SR3; and tc Server 6.0.20.B allows remote authenticated users t...
CVE-2009-2897: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in hq/web/common/GenericError.jsp in the generic exception handler in the web interface in SpringSource Hyperic HQ 3.2.x before 3.2.6.1, 4.0.x before 4.0.3.1, 4.1.x before 4.1.2.1, and 4.2-beta1; Application Management Suite AMS 2.0.0.SR3; and tc...
CVE-2009-2898: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Alerts list feature in the web interface in SpringSource Hyperic HQ 3.2.x before 3.2.6.1, 4.0.x before 4.0.3.1, 4.1.x before 4.1.2.1, and 4.2-beta1; Application Management Suite AMS 2.0.0.SR3; and tc Server 6.0.20.B allows remote authenticated users t...
CVE-2008-5808
Cross-site scripting XSS vulnerability in Six Apart Movable Type Enterprise MTE 1.x before 1.56; Movable Type MT 3.x before 3.38; and Movable Type, Movable Type Open Source MTOS, and Movable Type Enterprise 4.x before 4.23 allows remote attackers to inject arbitrary web script or HTML via...
CVE-2008-5808
CVE-2008-5808 is an XSS vulnerability in Six Apart Movable Type products: Movable Type Enterprise (MTE) 1.x before 1.56, Movable Type (MT) 3.x before 3.38, and MTOS/Movable Type Enterprise 4.x before 4.23. The root cause is a cross-site scripting flaw that allows remote attackers to inject arbitr...
CVE-2008-5808: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Six Apart Movable Type Enterprise MTE 1.x before 1.56; Movable Type MT 3.x before 3.38; and Movable Type, Movable Type Open Source MTOS, and Movable Type Enterprise 4.x before 4.23 allows remote attackers to inject arbitrary web script or HTML via...
Hosting Controller 0.6.1 HotFix 2.1 - Change Credit Limit
Hi, I'm Soroush Dalili from GSG GrayHatz Security Group. Title: Hosting controller program have a security bug in "AccountActions.asp" that an authenticated user can change his/her credit and buy some services! Version: 6.1 HotFix 2.1 and older Developer url: hostingcontroller.com Comment: Hostin...
