Atlassian Fisheye < 2.4.4Multiple Vulnerabilities

Fisheye and Crucible are prone to cross-site scripting, security- bypass, and information disclosure vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Atlassian FishEye Code Metrics Report Plugin XSS

The version of Atlassian FishEye running on the remote host has a cross-site scripting vulnerability. The Code Metrics Report Plugin does not properly sanitize user input. A remote attacker could exploit this by tricking a user into making a maliciously crafted request, resulting in the execution...

Atlassian FishEye Detection

Atlassian FishEye, a web interface for version control systems such as Subversion, Git, and Perforce, is running on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid50449; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate",...

Atlassian FishEye Multiple Cross Site Scripting Vulnerabilities

Atlassian FishEye is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user- supplied input. An attacker may leverage these issues to execute arbitrary HTML and script code in the browser of an unsuspecting user in the context of the affected site. This...

Atlassian FishEye Multiple Cross Site Scripting Vulnerabilities

Atlassian FishEye is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

FishEye Detection

Detection of FishEye. The script sends a connection request to the server and attempts to extract the version number from the reply. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Atlassian JIRA < 4.1.2 Multiple Vulnerabilities

Binary data 5577.prm...

Cross site scripting

Cross-site scripting XSS vulnerability in Bitweaver 2.0.2 allows remote attackers to inject arbitrary web script or HTML via the URL parameter to 1 edit.php and 2 list.php in articles/; 3 listblogs.php and 4 rankings.php in blogs/; 5 calendar/index.php; 6 calendar.php, 7 index.php, and 8...

CVE-2007-6650

Unrestricted file upload vulnerability in fisheye/upload.php in Bitweaver R2 CMS allows remote attackers to upload arbitrary files by using the image/gif content type, and possibly other image and PDF content types, as demonstrated by uploading a .htaccess file...

CVE-2006-6924

bitweaver 1.3.1 and earlier allows remote attackers to obtain sensitive information via a sortmode=-98 query string to 1 blogs/listblogs.php, 2 fisheye/index.php, 3 wiki/orphanpages.php, or 4 wiki/listpages.php, which forces a SQL error. NOTE: the fisheye/listgalleries.php vector is already cover...