5054 matches found
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in AlstraSoft SMS Text Messaging Enterprise allow remote attackers to inject arbitrary web script or HTML via the 1 domain or 2 q parameter to a admin/membersearch.php, or 3 the userid parameter to b admin/edituser.php...
CVE-2007-4079
CVE-2007-4079 describes multiple XSS vulnerabilities in AlstraSoft SMS Text Messaging Enterprise. The flaws allow remote attackers to inject arbitrary web script or HTML via the domain or q parameter to admin/membersearch.php, or the userid parameter to admin/edituser.php. The NVD entry lists a M...
CVE-2007-4079
Multiple cross-site scripting XSS vulnerabilities in AlstraSoft SMS Text Messaging Enterprise allow remote attackers to inject arbitrary web script or HTML via the 1 domain or 2 q parameter to a admin/membersearch.php, or 3 the userid parameter to b admin/edituser.php...
Ipswitch IM Server < 2.07 Multiple Function Remote DoS
Ipswitch Instant Messaging Server, a secure, instant messaging product targeted at businesses, is installed on the remote Windows host. The version of Instant Messaging Server on the remote host reportedly allows an unauthenticated attacker to overwrite a destructor and crash the application when...
Ipswitch Instant Messaging畸形消息远程拒绝服务漏洞
BUGTRAQ ID: 25031 Ipswitch Instant Messaging是Ipswitch协作组件中所捆绑的即时消息软件。 Ipswitch IM在处理畸形的消息时存在漏洞，远程攻击者可能利用此漏洞导致服务崩溃。 如果攻击者在5179端口上创建了到IM Server服务的TCP会话，就可以通过发送畸形消息导致服务守护程序崩溃，崩溃的服务无法自动重启。可通过以下函数到达有漏洞的代码： DoAttachVideoSender DoAttachVideoReceiver DoAttachAudioSender DoAttachAudioReceiver Ipswitch...
Ipswitch Instant Messaging Server Detection
The remote service is an Ipswitch IM Server, the server portion of Ipswitch Instant Messaging, a secure, instant messaging product targeted at businesses and running on Windows. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if...
Ipswitch Instant Messaging Client Detection
The remote service is an Ipswitch IM Client, the client portion of Ipswitch Instant Messaging, a secure, instant messaging product targeted at businesses and running on Windows. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if...
CVE-2007-3959
The IM Server aka IMserve or IMserver 2.0.5.30 and probably earlier in Ipswitch Instant Messaging before 2.07 in Ipswitch Collaboration Suite ICS allows remote attackers to cause a denial of service daemon crash via certain data to TCP port 5179 that overwrites a destructor, as reachable by the 1...
Design/Logic Flaw
The IM Server aka IMserve or IMserver 2.0.5.30 and probably earlier in Ipswitch Instant Messaging before 2.07 in Ipswitch Collaboration Suite ICS allows remote attackers to cause a denial of service daemon crash via certain data to TCP port 5179 that overwrites a destructor, as reachable by the 1...
Ipswitch Instant Messaging Server DoS
Crash on parsing TCP/5179 traffic...
iDefense Security Advisory 07.23.07: Ipswitch Instant Messaging Server Denial of Service Vulnerability
Ipswitch Instant Messaging Server Denial of Service Vulnerability iDefense Security Advisory 07.23.07 http://labs.idefense.com/intelligence/vulnerabilities/ Jul 23, 2007 I. BACKGROUND Ipswitch Instant Messaging is the instant messaging software that is included with Ipswitch Collaboration Suite...
Alstrasoft Sms Text Messaging Enterprise 2.0 - adminmembersearch.php Multiple Cross-Site Scripting Vulnerabilities
Alstrasoft Sms Text Messaging Enterprise 2.0 - adminmembersearch.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/25022/info SMS Text Messaging Enterprise is prone to multiple cross-site scripting vulnerabilities because the application fails to properly...
Alstrasoft Sms Text Messaging Enterprise 2.0 - '/admin/edituser.php?userid' Cross-Site Scripting
source: https://www.securityfocus.com/bid/25022/info SMS Text Messaging Enterprise is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browse...
Alstrasoft Sms Text Messaging Enterprise 2.0 - '/admin/membersearch.php' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/25022/info SMS Text Messaging Enterprise is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browse...
alstrasoft-multi.txt
AlstraSoft Multiple products multiple Vulnerabilities Vendor urL:http://www.alstrasoft.com/products.htm Advisore url:http://lostmon.blogspot.com/2007/07/ alstrasoft-multiple-products-multiple.html Vendor notify:yes webform Exploit included: yes Multiple products of Alstrasoft Are prone vulnerable...
Alstrasoft Sms Text Messaging Enterprise 2.0 - adminedituser.php?userid Cross-Site Scripting
Alstrasoft Sms Text Messaging Enterprise 2.0 - adminedituser.php?userid Cross-Site Scripting source: https://www.securityfocus.com/bid/25022/info SMS Text Messaging Enterprise is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplie...
Design/Logic Flaw
Multiple unspecified vulnerabilities in Oracle Collaboration Suite 10.1.2 have unknown impact and remote attack vectors via 1 Instant Messaging/Presence OCS01 and 2 Oracle Single Sign On AS02...
CVE-2007-3864
Multiple unspecified vulnerabilities in Oracle Collaboration Suite 10.1.2 have unknown impact and remote attack vectors via 1 Instant Messaging/Presence OCS01 and 2 Oracle Single Sign On AS02...
CVE-2007-3864
CVE-2007-3864 relates to multiple unspecified vulnerabilities in Oracle Collaboration Suite 10.1.2 with remote attack vectors via Instant Messaging/Presence (OCS01) and Oracle Single Sign On (AS02). The connected sources consistently identify the affected product as Oracle Collaboration Suite 10....