376 matches found
Novell ZENworks Mobile Management DUSAP.php Language Parameter Vulnerability
Added: 07/18/2013 CVE: CVE-2013-1082 BID: 60179 OSVDB: 91118 Background ZENworks Mobile Management ZMM offers centralized management tools that are useful for deploying new mobile devices in the workforce, whether those devices are company-issued or privately owned. ZMM ensures that users have th...
Novell ZENworks Configuration Console Login.jsp language Parameter XSS
The remote web server hosts a version of the ZENworks Configuration Console that is affected by a cross-site scripting vulnerability. The 'language' parameter is not properly validated in 'Login.jsp' and can be tampered with to inject arbitrary script code in a user's browser via a specially...
Novell ZENworks Mobile Management MDM.php Language Parameter Vulnerability
Added: 06/15/2013 CVE: CVE-2013-1081 BID: 58402 OSVDB: 91119 Background ZENworks Mobile Management ZMM offers centralized management tools that are useful for deploying new mobile devices in the workforce, whether those devices are company-issued or privately owned. ZMM ensures that users have th...
Novell ZENworks Mobile Management MDM.php Language Parameter Vulnerability
Added: 06/15/2013 CVE: CVE-2013-1081 BID: 58402 OSVDB: 91119 Background ZENworks Mobile Management ZMM offers centralized management tools that are useful for deploying new mobile devices in the workforce, whether those devices are company-issued or privately owned. ZMM ensures that users have th...
Novell ZENworks Mobile Management MDM.php Language Parameter Vulnerability
Added: 06/15/2013 CVE: CVE-2013-1081 BID: 58402 OSVDB: 91119 Background ZENworks Mobile Management ZMM offers centralized management tools that are useful for deploying new mobile devices in the workforce, whether those devices are company-issued or privately owned. ZMM ensures that users have th...
Directory traversal
Directory traversal vulnerability in DUSAP.php in Novell ZENworks Mobile Management before 2.7.1 allows remote attackers to include and execute arbitrary local files via the language parameter...
CVE-2013-1082
Directory traversal vulnerability in DUSAP.php in Novell ZENworks Mobile Management before 2.7.1 allows remote attackers to include and execute arbitrary local files via the language parameter...
CVE-2013-1082
Novell ZENworks Mobile Management (ZMM) DUSAP.php is vulnerable to a directory traversal-based local file inclusion (LFI) via the language parameter, allowing remote unauthenticated attackers to include and execute arbitrary local files. The issue affects ZMM versions 2.7.0 and 2.6.1 (likely earl...
CVE-2013-1081
Directory traversal vulnerability in MDM.php in Novell ZENworks Mobile Management ZMM 2.6.1 and 2.7.0 allows remote attackers to include and execute arbitrary local files via the language parameter...
Directory traversal
Directory traversal vulnerability in MDM.php in Novell ZENworks Mobile Management ZMM 2.6.1 and 2.7.0 allows remote attackers to include and execute arbitrary local files via the language parameter...
CVE-2013-1081
Directory traversal vulnerability in MDM.php in Novell ZENworks Mobile Management ZMM 2.6.1 and 2.7.0 allows remote attackers to include and execute arbitrary local files via the language parameter...
AShop 5.3.4 Cross Site Scripting
HTTPCS Advisory : HTTPCS104 Product : AShop Version : 5.3.4 Date : 2012-09-20 Criticality level : Less Critical Description : A vulnerability has been discovered in AShop, which can be exploited by malicious people to conduct cross-site scripting attacks. Input passed via the 'language' parameter...
CVE-2011-5131
Cross-site request forgery CSRF vulnerability in global.php in MyBB before 1.6.5 allows remote attackers to hijack the authentication of a user for requests that change the user's language via the language parameter...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in global.php in MyBB before 1.6.5 allows remote attackers to hijack the authentication of a user for requests that change the user's language via the language parameter...
CVE-2011-5131
Cross-site request forgery CSRF vulnerability in global.php in MyBB before 1.6.5 allows remote attackers to hijack the authentication of a user for requests that change the user's language via the language parameter...
Directory traversal
Directory traversal vulnerability in upgrade.php in Piwigo before 2.3.4 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the language parameter...
CVE-2012-2208
Directory traversal vulnerability in upgrade.php in Piwigo before 2.3.4 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the language parameter...
Directory traversal
Multiple directory traversal vulnerabilities in MySQLDumper 1.24.4 allow remote attackers to read arbitrary files via a .. dot dot in the 1 language parameter to learn/cubemail/install.php or 2 f parameter learn/cubemail/filemanagement.php, or execute arbitrary local files via a .. dot dot in the...
Directory traversal
Directory traversal vulnerability in account/preferences.php in LEPTON before 1.1.4 allows remote attackers to include and execute arbitrary files via a .. dot dot in the language parameter...