192 matches found
Fortinet FortiWeb Multiple Vulnerabilities (FG-IR-13-009)
Fortinet FortiWeb is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:fortinet:fortiweb"; if...
CVE-2014-4738
Multiple cross-site scripting XSS vulnerabilities in FortiGuard FortiWeb 5.0.x, 5.1.x, and 5.2.x before 5.2.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to 1 user/ldapuser/checkdlg or 2 user/radiususer/checkdlg...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in FortiGuard FortiWeb 5.0.x, 5.1.x, and 5.2.x before 5.2.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to 1 user/ldapuser/checkdlg or 2 user/radiususer/checkdlg...
CVE-2014-4738
Multiple cross-site scripting XSS vulnerabilities in FortiGuard FortiWeb 5.0.x, 5.1.x, and 5.2.x before 5.2.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to 1 user/ldapuser/checkdlg or 2 user/radiususer/checkdlg...
CVE-2014-4738
Fortinet FortiWeb 5.x prior to 5.2.1 is affected by CVE-2014-4738 (XSS) in the web management interface URLs /user/ldap_user/check_dlg and /user/radius_user/check_dlg due to insufficient input validation. This allows remote attackers to inject arbitrary JavaScript in an administrative browser ses...
CVE-2014-1956
CRLF injection vulnerability in FortiGuard FortiWeb before 5.0.3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors...
CVE-2014-1955
Cross-site scripting XSS vulnerability in FortiGuard FortiWeb before 5.0.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2014-1957
FortiGuard FortiWeb before 5.0.3 allows remote authenticated users to gain privileges via unspecified vectors...
CVE-2013-6990
FortiGuard FortiAuthenticator before 3.0 allows remote administrators to gain privileges via the command line interface...
Design/Logic Flaw
FortiGuard FortiWeb before 5.0.3 allows remote authenticated users to gain privileges via unspecified vectors...
Crlf injection
CRLF injection vulnerability in FortiGuard FortiWeb before 5.0.3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in FortiGuard FortiWeb before 5.0.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Design/Logic Flaw
FortiGuard FortiAuthenticator before 3.0 allows remote administrators to gain privileges via the command line interface...
CVE-2013-6990
FortiAuthenticator before version 3.0 is affected by CVE-2013-6990, a privilege-escalation flaw that lets remote administrators gain root-level access via the command-line interface. The issue is discussed in Fortinet FG-IR-13-016 and is echoed by multiple vulnerability reports describing a subsh...
CVE-2014-1956
CRLF injection vulnerability in FortiGuard FortiWeb before 5.0.3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors...
CVE-2013-6990
FortiGuard FortiAuthenticator before 3.0 allows remote administrators to gain privileges via the command line interface...
CVE-2014-1955
Cross-site scripting XSS vulnerability in FortiGuard FortiWeb before 5.0.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2014-1956
CVE-2014-1956 describes a CRLF injection in Fortinet FortiWeb prior to version 5.0.3, enabling remote attackers to inject arbitrary HTTP headers and perform HTTP response splitting via unspecified vectors. The vulnerability is documented across multiple sources (NVD entry and FortiGuard FG-IR-13-...
CVE-2014-1957
Fortinet FortiWeb is affected by CVE-2014-1957 (FortiWeb prior to 5.0.3). The vulnerability allows remote authenticated users to gain privileges via unspecified vectors. Affected product: FortiWeb; vulnerable component/issue: privilege escalation in versions before 5.0.3. The issue is confirmed a...