CVE-2013-0685: Undefined Security Weakness

Invensys Wonderware Information Server WIS 4.0 SP1SP1, 4.5- Portal, and 5.0- Portal does not restrict unspecified size and amount values, which allows remote attackers to execute arbitrary code or cause a denial of service resource consumption via unknown vectors...

PT-2013-2533

Name of the Vulnerable Software and Affected Versions Invensys Wonderware Information Server WIS version 4.0 SP1 Invensys Wonderware Information Server WIS versions 4.5 through 5.0 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via...

CVE-2013-0688: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Invensys Wonderware Information Server WIS 4.0 SP1SP1, 4.5- Portal, and 5.0- Portal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2013-2529

Name of the Vulnerable Software and Affected Versions Invensys Wonderware Information Server WIS versions 4.0 SP1 through 5.0 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. Recommendations For Invensys Wonderware Information Server WIS versions 4.0 SP...

CVE-2013-0684: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Invensys Wonderware Information Server WIS 4.0 SP1SP1, 4.5- Portal, and 5.0- Portal allows remote attackers to execute arbitrary SQL commands via unspecified vectors...