Cross site request forgery (csrf)

Unspecified vulnerability in ManageEngine Firewall Analyzer allows remote authenticated users to "access any common file" via a direct URL request...

CVE-2007-1642

Unspecified vulnerability in ManageEngine Firewall Analyzer allows remote authenticated users to "access any common file" via a direct URL request...

CVE-2007-1642: Undefined Security Weakness

Unspecified vulnerability in ManageEngine Firewall Analyzer allows remote authenticated users to "access any common file" via a direct URL request...

ManageEngine Firewall Analyzer arbitrary file disclosure to authorized user

"ManageEngine Firewall Analyzer is a web based firewall monitoring and log analysis tool that collects, analyses, and reports information on enterprise-wide firewalls, proxy servers, and radius servers. " a authorized user to the "firewall analyzer" can access any common file on the system, it is...

CVE-2007-1642

Unspecified vulnerability in ManageEngine Firewall Analyzer allows remote authenticated users to "access any common file" via a direct URL request...

CVE-2007-1642

Technical details about CVE-2007-1642 are not publicly provided in the supplied documents. Monitor for updates from official advisories and databases before drawing conclusions about affected versions or remediation.

CVE-2006-2343

Cross-site scripting XSS vulnerability in Search.do in ManageEngine OpManager 6.0 allows remote attackers to inject arbitrary web script or HTML via the searchTerm parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-2343

The provided documents identify CVE-2006-2343 as a cross-site scripting (XSS) vulnerability in ManageEngine OpManager 6.0, affecting the Search.do path via the searchTerm parameter. The root cause is improper handling of user-supplied input leading to injected web script/HTML. Impact is remote co...

CVE-2006-2343: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Search.do in ManageEngine OpManager 6.0 allows remote attackers to inject arbitrary web script or HTML via the searchTerm parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

[SA20067] ManageEngine OpManager "searchTerm" Cross-Site Scripting

TITLE: ManageEngine OpManager "searchTerm" Cross-Site Scripting SECUNIA ADVISORY ID: SA20067 VERIFY ADVISORY: http://secunia.com/advisories/20067/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: ManageEngine OpManager 6.x http://secunia.com/product/9902/...

CVE-2005-3522

Cross-site scripting XSS vulnerability in index.jsp in ManageEngine Netflow Analyzer 4.0.2 allows remote attackers to inject arbitrary web script or HTML via the grDisp parameter...

CVE-2005-3522

CVE-2005-3522 affects ManageEngine Netflow Analyzer 4.0.2. The vulnerability is a reflected cross-site scripting (XSS) in index.jsp via the grDisp parameter, allowing an attacker to inject arbitrary web script or HTML. The provided documents do not specify the exact root cause code path, versions...

CVE-2005-3522

Cross-site scripting XSS vulnerability in index.jsp in ManageEngine Netflow Analyzer 4.0.2 allows remote attackers to inject arbitrary web script or HTML via the grDisp parameter...

CVE-2005-3522: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.jsp in ManageEngine Netflow Analyzer 4.0.2 allows remote attackers to inject arbitrary web script or HTML via the grDisp parameter...