109 matches found
Fedora Update for viewvc FEDORA-2008-8270
Check for the Version of viewvc OpenVAS Vulnerability Test Fedora Update for viewvc FEDORA-2008-8270 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
Fedora Update for viewvc FEDORA-2008-2159
Check for the Version of viewvc OpenVAS Vulnerability Test Fedora Update for viewvc FEDORA-2008-2159 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
[SECURITY] Fedora 8 Update: viewvc-1.0.6-1.fc8
ViewVC is a browser interface for CVS and Subversion version control repositories. It generates templatized HTML to present navigable directory, revision, and change log listings. It can display specific versions of files as well as diffs between those versions. Basically, ViewVC provides the bul...
CVE-2008-1548
Multiple cross-site scripting XSS vulnerabilities in Aeries Browser Interface ABI 3.8.3.14 in Eagle Software Aries Student Information System allow remote attackers to inject arbitrary web script or HTML via the 1 UserName parameter to loginproc.asp and the 2 usr parameter to Login.asp...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Aeries Browser Interface ABI 3.8.3.14 in Eagle Software Aries Student Information System allow remote attackers to inject arbitrary web script or HTML via the 1 UserName parameter to loginproc.asp and the 2 usr parameter to Login.asp...
Sql injection
Multiple SQL injection vulnerabilities in Aeries Browser Interface ABI 3.8.3.14 in Eagle Software Aries Student Information System allow remote attackers to execute arbitrary SQL commands via the 1 GrdBk parameter to GradebookOptions.asp and the 2 SchlCode variable to loginproc.asp, a different...
CVE-2008-1549
Multiple SQL injection vulnerabilities in Aeries Browser Interface ABI 3.8.3.14 in Eagle Software Aries Student Information System allow remote attackers to execute arbitrary SQL commands via the 1 GrdBk parameter to GradebookOptions.asp and the 2 SchlCode variable to loginproc.asp, a different...
CVE-2008-1548
Multiple cross-site scripting XSS vulnerabilities in Aeries Browser Interface ABI 3.8.3.14 in Eagle Software Aries Student Information System allow remote attackers to inject arbitrary web script or HTML via the 1 UserName parameter to loginproc.asp and the 2 usr parameter to Login.asp...
CVE-2008-1548
CVE-2008-1548 describes multiple XSS vulnerabilities in Aeries Browser Interface (ABI) 3.8.3.14 within Eagle Software’s Aries Student Information System. The issues allow remote attackers to inject arbitrary web script or HTML via (1) the UserName parameter to loginproc.asp and (2) the usr parame...
CVE-2008-1549
CVE-2008-1549 documents multiple SQL injection vulnerabilities in Eagle Software’s Aeries Browser Interface (ABI) 3.8.3.14 within the Aries Student Information System. The vulnerabilities allow remote attackers to execute arbitrary SQL commands via the GrdBk parameter to GradebookOptions.asp and ...
aeries-sqlxss.txt
Discovered By : Arsalan Emamjomehkashan aeries browser interfaceABI 3.8.3.14 Remote SQL Injection Website:http://aeries.com/ SQL injection: GradebookOptions.asp?GrdBk=SQL loginproc.asp If you post variable "SchlCode" XSS: UserName variable on loginproc.asp and usr on Login.asp...
aeries browser interface(ABI) 3.8.3.14 Remote SQL Injection
Discovered By : Arsalan Emamjomehkashan aeries browser interfaceABI 3.8.3.14 Remote SQL Injection Website:http://aeries.com/ SQL injection: GradebookOptions.asp?GrdBk=SQL loginproc.asp If you post variable "SchlCode" XSS: UserName variable on loginproc.asp and usr on Login.asp...
[SECURITY] Fedora 7 Update: viewvc-1.0.5-1.fc7
ViewVC is a browser interface for CVS and Subversion version control repositories. It generates templatized HTML to present navigable directory, revision, and change log listings. It can display specific versions of files as well as diffs between those versions. Basically, ViewVC provides the bul...
Sql injection
SQL injection vulnerability in GradebookStuScores.asp in Eagle Software Aeries Browser Interface ABI 3.8.2.8 allows remote attackers to execute arbitrary SQL commands via the GrdBk parameter...
CVE-2008-0941
Cross-site scripting XSS vulnerability in Eagle Software Aeries Browser Interface ABI 3.8.2.8 allows remote authenticated users to inject arbitrary web script or HTML via an event...
CVE-2008-0942
SQL injection vulnerability in GradebookStuScores.asp in Eagle Software Aeries Browser Interface ABI 3.8.2.8 allows remote attackers to execute arbitrary SQL commands via the GrdBk parameter...
Sql injection
Multiple SQL injection vulnerabilities in Eagle Software Aeries Browser Interface ABI 3.7.2.2 allow remote attackers to execute arbitrary SQL commands via the 1 FC parameter to Comments.asp, or the Term parameter to 2 Labels.asp or 3 ClassList.asp...
CVE-2008-0941
The vulnerability CVE-2008-0941 affects Eagle Software Aeries Browser Interface (ABI) 3.8.2.8. It is a Cross-site Scripting (XSS) flaw that allows remote authenticated users to inject arbitrary web script or HTML via an event. The NVD entry lists a base score of 4.3 (Medium) with vector AV:N/AC:M...
CVE-2008-0943
Multiple SQL injection vulnerabilities in Eagle Software Aeries Browser Interface ABI 3.7.2.2 allow remote attackers to execute arbitrary SQL commands via the 1 FC parameter to Comments.asp, or the Term parameter to 2 Labels.asp or 3 ClassList.asp...