380 matches found
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the J-Web interface in Juniper JUNOS 8.5R1.14 allow remote authenticated users to inject arbitrary web script or HTML via 1 the JEXECOUTID parameter in a JEXECMODERELAYOUTPUT action to the jexec program; the 2 act, 3 refresh-time, or 4 ifid...
CVE-2009-3486
Multiple cross-site scripting XSS vulnerabilities in the J-Web interface in Juniper JUNOS 8.5R1.14 allow remote authenticated users to inject arbitrary web script or HTML via the host parameter to 1 the pinghost program, reachable through the diagnose program; or 2 the traceroute program, reachab...
CVE-2009-3486
CVE-2009-3486 concerns multiple XSS vulnerabilities in the J-Web interface of Juniper JUNOS 8.5R1.14. Remote authenticated users can inject arbitrary script/HTML via host-related parameters across diagnose, configuration, and local-cert actions (examples: pinghost, traceroute, probe-limit, firewa...
CVE-2009-3485
Cross-site scripting XSS vulnerability in the J-Web interface in Juniper JUNOS 8.5R1.14 and 9.0R1.1 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to the default URI...
CVE-2009-3487
Multiple cross-site scripting XSS vulnerabilities in the J-Web interface in Juniper JUNOS 8.5R1.14 allow remote authenticated users to inject arbitrary web script or HTML via 1 the JEXECOUTID parameter in a JEXECMODERELAYOUTPUT action to the jexec program; the 2 act, 3 refresh-time, or 4 ifid...
CVE-2009-3487
CVE-2009-3487 affects Juniper JUNOS 8.5R1.14 through the J-Web interface, with multiple XSS vectors that allow remote authenticated users to inject arbitrary script/HTML. Affected components/functions include: JEXEC_OUTID in JEXEC_MODE_RELAY_OUTPUT for the jexec program; parameters in scripter.ph...
CVE-2009-3485
CVE-2009-3485 is a cross-site scripting (XSS) vulnerability in the J-Web interface of Juniper JUNOS 8.5R1.14 and 9.0R1.1. The issue allows remote attackers to inject arbitrary web script or HTML via PATH_INFO to the default URI. Affected component: J-Web (Junos OS). Root cause: insufficient input...
Juniper Junos 8.59.0 J - Web Interface PATH_INFO Cross-Site Scripting
Juniper Junos 8.59.0 J - Web Interface PATHINFO Cross-Site Scripting source: https://www.securityfocus.com/bid/36537/info Juniper Networks JUNOS is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data to J-Web Junip...
Juniper Junos 8.59.0 J-Web Interface - configuration Multiple Cross-Site Scripting Vulnerabilities
Juniper Junos 8.59.0 J-Web Interface - configuration Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/36537/info Juniper Networks JUNOS is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to sufficiently sanitize...
Juniper Junos 8.59.0 J - Web Interface (Multiple Script) m[] Cross-Site Scripting
Juniper Junos 8.59.0 J - Web Interface Multiple Script m Cross-Site Scripting source: https://www.securityfocus.com/bid/36537/info Juniper Networks JUNOS is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data to...
Juniper Junos 8.5/9.0 J-Web Interface - '/configuration' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/36537/info Juniper Networks JUNOS is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data to J-Web Juniper Web Management. Attacker-supplied HTML or JavaScript code could ru...
Juniper Junos 8.59.0 J-Web Interface - diagnose Multiple Cross-Site Scripting Vulnerabilities
Juniper Junos 8.59.0 J-Web Interface - diagnose Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/36537/info Juniper Networks JUNOS is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to sufficiently sanitize...
Juniper Junos 8.59.0 J-Web Interface - scripter.php Multiple Cross-Site Scripting Vulnerabilities
Juniper Junos 8.59.0 J-Web Interface - scripter.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/36537/info Juniper Networks JUNOS is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to sufficiently sanitize...
Juniper Junos 8.5/9.0 J-Web Interface - '/diagnose' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/36537/info Juniper Networks JUNOS is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data to J-Web Juniper Web Management. Attacker-supplied HTML or JavaScript code could ru...
Juniper Junos 8.5/9.0 J - Web Interface (Multiple Script) 'm[]' Cross-Site Scripting
source: https://www.securityfocus.com/bid/36537/info Juniper Networks JUNOS is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data to J-Web Juniper Web Management. Attacker-supplied HTML or JavaScript code could ru...
Juniper Junos 8.5/9.0 J-Web Interface - 'scripter.php' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/36537/info Juniper Networks JUNOS is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data to J-Web Juniper Web Management. Attacker-supplied HTML or JavaScript code could ru...
CVE-2007-1144
Directory traversal vulnerability in jwpn-photos.php in J-Web Pics Navigator 2.0 allows remote attackers to list arbitrary directories via a .. dot dot in the dir parameter...
CVE-2007-1143
CVE-2007-1143 describes a directory traversal vulnerability in pn-menu.php of J-Web Pics Navigator 1.0. The flaw allows remote attackers to list arbitrary directories by supplying a .. sequence in the dir parameter. Documents consistently identify this as a directory traversal risk with impact on...
CVE-2007-1144
CVE-2007-1144 describes a directory traversal vulnerability in J-Web Pics Navigator 2.0, specifically in jwpn-photos.php where a dot-dot (“..”) in the dir parameter allows remote listing of arbitrary directories. The NVD entry lists a CVSS v2 base score of 5.0 (Medium) with network access, low at...