CVE-2016-1608

CVE-2016-1608 affects Micro Focus (Novell) Filr appliances. The vulnerability allows remote authenticated users to execute arbitrary commands via shell metacharacters in the ntpServer parameter of vaconfig/time. Affected are Filr 1.2 up to 1.2.0.846 and Filr 2 up to 2.0.0.421, with fixes in Filr ...

CVE-2016-1609

Multiple cross-site scripting XSS vulnerabilities in Novell Filr before 1.2 Security Update 3 and 2.0 before Security Update 2 allow remote authenticated users to inject arbitrary web script or HTML via crafted input, as demonstrated by a crafted attribute of an IMG element in the phone field of ...

CVE-2016-1611

Novell Filr 1.2 before Hot Patch 6 and 2.0 before Hot Patch 2 uses world-writable permissions for /etc/profile.d/vainit.sh, which allows local users to gain privileges by replacing this file's content with arbitrary shell commands...

CVE-2016-1608

vaconfig/time in Novell Filr before 1.2 Security Update 3 and 2.0 before Security Update 2 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the ntpServer parameter...

CVE-2016-1610

Directory traversal vulnerability in the email-template feature in Novell Filr before 1.2 Security Update 3 and 2.0 before Security Update 2 allows remote attackers to bypass intended access restrictions and write to arbitrary files via a .. dot dot in a blob name...

CVE-2016-1610

CVE-2016-1610 affects Micro Focus/Novell Filr (email-template feature) prior to 1.2 Security Update 3 and 2.0 Security Update 2. A directory traversal flaw allows an attacker to bypass access controls and write arbitrary files via a .. in a blob name. Impact details in the sources indicate potent...

CVE-2016-1611

CVE-2016-1611 affects Micro Focus (Novell) Filr 1.2 before Hot Patch 6 and 2.0 before Hot Patch 2. The issue is world-writable permissions on /etc/profile.d/vainit.sh, allowing a local user to replace the file and gain privileges (local privilege escalation). Affected versions include Filr 1.2 an...

Micro Focus Filr CSRF / XSS / Code Execution

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple vulnerabilities product: Micro Focus former Novell Filr Appliance vulnerable version: Filr 2 =2.0.0.421, Filr 1.2 = 1.2.0.846 fixed version: Filr 2 v2.0.0.465,...

Micro Focus (Novell) Filr Detection (SSH Login)

SSH login-based detection of Micro Focus Novell Filr. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Micro Focus Filr 2 2.0.0.421, Filr 1.2 1.2.0.846 - Multiple Vulnerabilities

Exploit for php platform in category web applications title: Multiple vulnerabilities product: Micro Focus former Novell Filr Appliance vulnerable version: Filr 2 =2.0.0.421, Filr 1.2 = 1.2.0.846 fixed version: Filr 2 v2.0.0.465, Filr 1.2 v1.2.0.871 CVE number: CVE-2016-1607, CVE-2016-1608,...

Micro Focus Filr 2 2.0.0.4211.2 1.2.0.846 - Multiple Vulnerabilities

Micro Focus Filr 2 2.0.0.4211.2 1.2.0.846 - Multiple Vulnerabilities SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple vulnerabilities product: Micro Focus former Novell Filr Appliance vulnerable version: Filr 2...

Micro Focus (Novell) Filr Detection (HTTP)

HTTP based detection of Micro Focus Novell Filr. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Micro Focus (Novell) Filr Administration Interface Detection (HTTP)

HTTP based detection of Micro Focus Novell Filr Administration Interface. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Micro Focus Filr 2 2.0.0.421/1.2 1.2.0.846 - Multiple Vulnerabilities

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple vulnerabilities product: Micro Focus former Novell Filr Appliance vulnerable version: Filr 2 =2.0.0.421, Filr 1.2 = 1.2.0.846 fixed version: Filr 2 v2.0.0.465,...

Novell Filr Cross-Site Scripting Vulnerability

Novell Filr is a file access and sharing solution for the enterprise from Novell, USA. A cross-site scripting vulnerability exists in version 1.2 prior to Novell Filr Hot Patch 4. The vulnerability can be exploited by a remote attacker to inject arbitrary web script or HTML via a specially crafte...

CVE-2015-5968

Cross-site scripting XSS vulnerability in Novell Filr 1.2 before Hot Patch 4 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

Cross site scripting

Cross-site scripting XSS vulnerability in Novell Filr 1.2 before Hot Patch 4 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2015-5968

The CVE-2015-5968 entry concerns Novell Filr 1.2 prior to Hot Patch 4, with a cross-site scripting (XSS) vulnerability that lets remote attackers inject arbitrary web script or HTML via a crafted URL. The underlying issue is an XSS flaw in the web interface where user-controlled URL parameters ca...

CVE-2015-5968

Cross-site scripting XSS vulnerability in Novell Filr 1.2 before Hot Patch 4 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

Novell Filr 1.2.0 Build 846 Cross Site Scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2015-055 Product: Novell Filr Vendor: Novell Affected Versions: 1.2.0 build 846 Tested Versions: 1.2.0 build 846 Vulnerability Type: Cross-Site Scripting CWE-79 Risk Level: Medium Solution Status: Fixed Vendor Notification:...