CVE-2008-6240

OpenEdit Digital Asset Management (DAM) contains a Cross-site Scripting (XSS) vulnerability in data/views/index.html, exploitable via the catalogid parameter. Affected software is OpenEdit DAM prior to version 5.2014. The vulnerability allows remote attackers to inject arbitrary web script or HTM...

CVE-2008-6238: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in archive/savedqueries/savequeryfinish.html in OpenEdit Digital Asset Management DAM before 5.2014 allows remote attackers to inject arbitrary web script or HTML via the name parameter...

CVE-2008-6239: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in OpenEdit Digital Asset Management DAM before 5.2014 allows remote attackers to perform unspecified actions as arbitrary users via unknown vectors...

CVE-2008-6240: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in data/views/index.html in OpenEdit Digital Asset Management DAM before 5.2014 allows remote attackers to inject arbitrary web script or HTML via the catalogid parameter...

E-TerraHabitat Privilege Escalation / DoS

Background ----------------- Vendor product information, from www.areva-td.com : AREVA T&D solution for real-time energy management systems; this suite of software products can be configured to meet your specific needs and business function. Transmission companies, Generation owners, Independent...

Yosemite Backup Service Driver Detection

The remote host is running Yosemite Backup, a commercial backup solution for Windows, Linux, and Novell NetWare and targetting small-to-medium sized businesses. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid34756...

CVE-2008-4735

PHP remote file inclusion vulnerability in header.php in Concord Asset, Software, and Ticket system CoAST 0.95 allows remote attackers to execute arbitrary PHP code via a URL in the sectionsfile parameter...

CVE-2008-4735

Concord Asset, Software, and Ticket system (CoAST) 0.95 is affected. The vulnerability is a PHP remote file inclusion in header.php, exploitable via the sections_file parameter, enabling remote code execution by supplying a URL. Root cause: unvalidated sections_file leads to PHP code execution. I...

CVE-2008-4735

PHP remote file inclusion vulnerability in header.php in Concord Asset, Software, and Ticket system CoAST 0.95 allows remote attackers to execute arbitrary PHP code via a URL in the sectionsfile parameter...

CVE-2008-4735: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in header.php in Concord Asset, Software, and Ticket system CoAST 0.95 allows remote attackers to execute arbitrary PHP code via a URL in the sectionsfile parameter...

coast-rfi.txt

Author : By DaRkLiFe Greetz : str0ke & S.VV.A.T. Script : The Concord Asset, Software, and Ticket systemCoAST 0.95 Remote File Inclusion Vulnerability Download :http://downloads.sourceforge.net/coastal/coast-0.95.tgz?modtime=1222363198&bigmirror=0 Exploit :...

CoAST 0.95 - sections_file Remote File Inclusion

CoAST 0.95 - sectionsfile Remote File Inclusion Author : By DaRkLiFe Greetz : str0ke & S.VV.A.T. Script : The Concord Asset, Software, and Ticket systemCoAST 0.95 Remote File Inclusion Vulnerability Download :http://downloads.sourceforge.net/coastal/coast-0.95.tgz?modtime=1222363198&bigmirror=0...

LANDesk QIP Server Detection

The remote service is a LANDesk QIP Server, one of the components of LANDesk Management Suite. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid34235; scriptversion"1.9"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"LANDesk QIP Server Detection";...

CVE-2008-3717

Harmoni before 1.6.0 does not require administrative privileges to list 1 user names or 2 asset ids, which allows remote attackers to obtain sensitive information...

CVE-2008-3717

Harmoni before 1.6.0 does not require administrative privileges to list 1 user names or 2 asset ids, which allows remote attackers to obtain sensitive information...

CVE-2008-3717

CVE-2008-3717 : The Harmoni application (before version 1.6.0) allows remote attackers to obtain sensitive information by listing (1) user names and (2) asset IDs without requiring administrative privileges. The NVD entry documents a confidentiality impact (partial) with network access and no aut...

CVE-2008-3717: Undefined Security Weakness

Harmoni before 1.6.0 does not require administrative privileges to list 1 user names or 2 asset ids, which allows remote attackers to obtain sensitive information...

CA Products That Embed Ingres Multiple Vulnerabilities

Title: CA Products That Embed Ingres Multiple Vulnerabilities CA Advisory Date: 2008-08-01 Reported By: iDefense Labs Impact: A remote attacker can execute arbitrary code, gain privileges, or cause a denial of service condition. Summary: CA products that embed Ingres contain multiple...

CVE-2008-2863

Multiple absolute path traversal vulnerabilities in eLineStudio Site Composer ESC 2.6 allow remote attackers to create or delete arbitrary directories via a full pathname in the inpCurrFolder parameter to 1 folderdel.asp or 2 foldernew.asp in cms/assetmanager/...

EUVD-2008-2856

Multiple absolute path traversal vulnerabilities in eLineStudio Site Composer ESC 2.6 allow remote attackers to create or delete arbitrary directories via a full pathname in the inpCurrFolder parameter to 1 folderdel.asp or 2 foldernew.asp in cms/assetmanager/...