Tollgrade SmartGrid LightHouse Sensor Management System Software Cross-Site Scripting Vulnerability

Tollgrade SmartGrid LightHouse Sensor Management System SMS Software is a Web-based smart grid lighthouse sensor management system from Tollgrade, Inc. A cross-site scripting vulnerability exists in Tollgrade SmartGrid LightHouse SMS Software EMS versions prior to 5.1 and 4.1.0 Build 16. A remote...

CVE-2016-0866

Cross-site scripting XSS vulnerability in Tollgrade SmartGrid LightHouse Sensor Management System SMS Software EMS before 5.1, and 4.1.0 Build 16, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-0866

Cross-site scripting XSS vulnerability in Tollgrade SmartGrid LightHouse Sensor Management System SMS Software EMS before 5.1, and 4.1.0 Build 16, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-0865

Tollgrade SmartGrid LightHouse Sensor Management System SMS Software EMS before 5.1, and 4.1.0 Build 16, allows remote authenticated users to change arbitrary passwords via unspecified vectors...

CVE-2016-0865

Tollgrade SmartGrid LightHouse Sensor Management System SMS Software EMS before 5.1, and 4.1.0 Build 16, allows remote authenticated users to change arbitrary passwords via unspecified vectors...

CVE-2016-0864

Tollgrade SmartGrid LightHouse Sensor Management System SMS Software EMS before 5.1, and 4.1.0 Build 16, allows remote attackers to obtain sensitive report and username information via unspecified vectors...

CVE-2016-0864

Tollgrade SmartGrid LightHouse Sensor Management System SMS Software EMS before 5.1, and 4.1.0 Build 16, allows remote attackers to obtain sensitive report and username information via unspecified vectors...

CVE-2016-0863

Cross-site request forgery CSRF vulnerability in Tollgrade SmartGrid LightHouse Sensor Management System SMS Software EMS before 5.1, and 4.1.0 Build 16, allows remote attackers to hijack the authentication of arbitrary users...

CVE-2016-0863

Cross-site request forgery CSRF vulnerability in Tollgrade SmartGrid LightHouse Sensor Management System SMS Software EMS before 5.1, and 4.1.0 Build 16, allows remote attackers to hijack the authentication of arbitrary users...

Information disclosure

Tollgrade SmartGrid LightHouse Sensor Management System SMS Software EMS before 5.1, and 4.1.0 Build 16, allows remote attackers to obtain sensitive report and username information via unspecified vectors...

Code injection

Tollgrade SmartGrid LightHouse Sensor Management System SMS Software EMS before 5.1, and 4.1.0 Build 16, allows remote authenticated users to change arbitrary passwords via unspecified vectors...

CVE-2016-0866

The CVE-2016-0866 entry maps to a Cross-site Scripting (XSS) vulnerability in Tollgrade SmartGrid LightHouse Sensor Management System (SMS) Software EMS prior to 5.1 and 4.1.0 Build 16. Affected product: LightHouse EMS web server; vulnerability arises from improper input handling, enabling remote...

CVE-2016-0865

Tollgrade SmartGrid LightHouse Sensor Management System SMS Software EMS before 5.1, and 4.1.0 Build 16, allows remote authenticated users to change arbitrary passwords via unspecified vectors...

CVE-2016-0863

The vulnerability CVE-2016-0863 affects Tollgrade SmartGrid LightHouse Sensor Management System (SMS) Software EMS prior to 5.1 and 4.1.0 Build 16. It is a Cross-Site Request Forgery (CSRF) flaw that allows an attacker to perform actions on an authenticated session, effectively hijacking user aut...

Lighthouse CMS 1.1 Search Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15952/info Lighthouse is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary...

Squirrelcart 3.5.4 Cross Site Scripting

Squirrelcart v3.5.4 table Remote Cross-Site Scripting Vulnerability Vendor: Lighthouse Development Product web page: http://www.squirrelcart.com Affected version: v2.0.0 - 3.5.4 Summary: Squirrelcart PHP Shopping Cart software is a fully customizable, robust php shopping cart, designed with the...

Squirrelcart 3.5.4 Cross Site Scripting Vulnerability

Squirrelcart version 3.5.4 suffers from a reflective cross site scripting vulnerability. Squirrelcart v3.5.4 table Remote Cross-Site Scripting Vulnerability Vendor: Lighthouse Development Product web page: http://www.squirrelcart.com Affected version: v2.0.0 - 3.5.4 Summary: Squirrelcart PHP...

Squirrelcart v3.5.4 (table) Remote Cross-Site Scripting Vulnerability

Summary Squirrelcart PHP Shopping Cart software is a fully customizable, robust php shopping cart, designed with the advanced developer and web novice in mind. Description Squirrelcart suffers from a XSS issue due to a failure to properly sanitize user-supplied input to the 'table' GET parameter ...

Lighthouse Teknologies - Blind SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================================================== Lighthouse Teknologies - Blind SQL Injection Vulnerability ========================================================================== Title: Lighthouse Teknologies - SQ...

CVE-2005-4780

Cross-site scripting XSS vulnerability in Fidra Lighthouse CMS 1.1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter in a querystring to the home page. NOTE: The vendor disputes this issue, saying "Lighthouse does not in any way make use of the...