Unfixed XSS vulnerability at cns.3721.com

Security researcher PD, has submitted on 28/03/2008 a cross-site-scripting XSS vulnerability affecting cns.3721.com, which at the time of submission ranked 13927 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/04/2008. It is currently unfixe...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in CGX 20050314 allow remote attackers to execute arbitrary PHP code via a URL in the pathCGX parameter to 1 mtdialogo.php, 2 ltdialogo.php, 3 login.php, and 4 logingecon.php in inc/; and multiple unspecified files in frm/, sql/, and cns/...

cgx-rfi.txt

CGX 2005-03-14 pathCGX Remote File Include Vulnerablites D.Script: http://codigolivre.org.br/frs/?groupid=413&releaseid=1978 Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Exploit:Path/inc/mtdialogo.php?pathCGX=Shell Exploit:Path/inc/ltdialogo.php?pathCGX=Shell...

CGX 20050314 (pathCGX) Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ============================================================ CGX 20050314 pathCGX Remote File Inclusion Vulnerabilities ============================================================ CGX 2005-03-14 pathCGX Remote File Include Vulnerablites...

CGX 20050314 - 'pathCGX' Remote File Inclusion

CGX 2005-03-14 pathCGX Remote File Include Vulnerablites D.Script: http://codigolivre.org.br/frs/?groupid=413&releaseid=1978 Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Exploit:Path/inc/mtdialogo.php?pathCGX=Shell Exploit:Path/inc/ltdialogo.php?pathCGX=Shell...

CVE-2007-2282

Cisco NetFlow Collection Engine (NFC) before version 6.0 is affected by a default credentials issue: the nfcuser account uses a default password, allowing remote attackers to modify NFC configuration and, on Linux, gain login access to the host OS. This is due to default accounts in NFC prior to ...

CVE-2007-2282: Undefined Security Weakness

Cisco Network Services CNS NetFlow Collection Engine NFC before 6.0 has an nfcuser account with the default password nfcuser, which allows remote attackers to modify the product configuration and, when installed on Linux, obtain login access to the host operating system...

CVE-2004-1163

Cisco CNS Network Registrar Central Configuration Management CCM server 6.0 through 6.1.1.3 allows remote attackers to cause a denial of service CPU consumption by ending a connection after sending a certain sequence of packets...

CVE-2004-1164

The lock manager in Cisco CNS Network Registrar 6.0 through 6.1.1.3 allows remote attackers to cause a denial of service process crash via a certain "unexpected packet sequence."...

CVE-2004-1163

CVE-2004-1163 affects Cisco CNS Network Registrar Central Configuration Management (CCM) server, versions 6.0 through 6.1.1.3. The issue allows a remote attacker to cause a denial-of-service by closing a connection after sending a specific sequence of packets, resulting in CPU consumption (availa...

CVE-2004-1164

Cisco CNS Network Registrar’s lock manager is vulnerable to denial of service when it receives a specially crafted sequence of packets. The lock manager process terminates, potentially taking down the Central Configuration Management (CCM) server and disrupting DNS, DHCP, TFTP, and related config...

CVE-2004-1163

Cisco CNS Network Registrar Central Configuration Management CCM server 6.0 through 6.1.1.3 allows remote attackers to cause a denial of service CPU consumption by ending a connection after sending a certain sequence of packets...

CVE-2004-1164

The lock manager in Cisco CNS Network Registrar 6.0 through 6.1.1.3 allows remote attackers to cause a denial of service process crash via a certain "unexpected packet sequence."...

CVE-2004-1164: Undefined Security Weakness

The lock manager in Cisco CNS Network Registrar 6.0 through 6.1.1.3 allows remote attackers to cause a denial of service process crash via a certain "unexpected packet sequence."...

CVE-2004-1163: Undefined Security Weakness

Cisco CNS Network Registrar Central Configuration Management CCM server 6.0 through 6.1.1.3 allows remote attackers to cause a denial of service CPU consumption by ending a connection after sending a certain sequence of packets...

Cisco CNS Network Registrar DoS

Invalid packets sequence causes CPU exhaustion or crash...

Cisco Security Advisory: Cisco CNS Network Registrar Denial of Service Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco CNS Network Registrar Denial of Service Vulnerability ============================================================================= Revision 1.0 For Public Release 2004 December 02 1600 UTC GMT -...