Cross site scripting

Cross-site scripting XSS vulnerability in crowbarframework/app/views/support/index.html.haml in the Crowbar barclamp in Crowbar, possibly 1.4 and earlier, allows remote attackers to inject arbitrary web script or HTML via the file parameter to /utils...

Design/Logic Flaw

The Crowbar Ohai plugin chef/cookbooks/ohai/files/default/plugins/crowbar.rb in the Deployer Barclamp in Crowbar, possibly 1.4 and earlier, allows local users to execute arbitrary shell commands via vectors related to "insecure handling of tmp files" and predictable file names...

CVE-2012-3551

CVE-2012-3551 is an XSS vulnerability in the Crowbar barclamp, specifically in crowbar_framework/app/views/support/index.html.haml. The flaw allows remote attackers to inject arbitrary web script or HTML via the file parameter to /utils, affecting Crowbar versions possibly 1.4 and earlier. The co...

CVE-2012-3551

Cross-site scripting XSS vulnerability in crowbarframework/app/views/support/index.html.haml in the Crowbar barclamp in Crowbar, possibly 1.4 and earlier, allows remote attackers to inject arbitrary web script or HTML via the file parameter to /utils...

CVE-2012-3537

CVE-2012-3537 affects the Crowbar project’s Crowbar Deployer, specifically the Ohai plugin (chef/cookbooks/ohai/files/default/plugins/crowbar.rb). The vulnerability is due to insecure handling of temporary files and predictable file names, enabling local users to execute arbitrary shell commands....

CVE-2012-3537

The Crowbar Ohai plugin chef/cookbooks/ohai/files/default/plugins/crowbar.rb in the Deployer Barclamp in Crowbar, possibly 1.4 and earlier, allows local users to execute arbitrary shell commands via vectors related to "insecure handling of tmp files" and predictable file names...

Crowbar - file Multiple Cross-Site Scripting Vulnerabilities

Crowbar - file Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/55315/info Crowbar is prone to multiple cross-site scripting vulnerabilities because it fails to sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script...

Crowbar - 'file' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/55315/info Crowbar is prone to multiple cross-site scripting vulnerabilities because it fails to sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of...