Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Dell OpenManage Server Administrator 6.5.0.1, 7.0.0.1, and 7.1.0.1 allow remote attackers to inject arbitrary web script or HTML via the topic parameter to html/indexmain.htm in 1 help/sm/en/Output/wwhelp/wwhimpl/js/, 2...

CVE-2012-6272

Dell OpenManage Server Administrator (OMSA) versions 6.5.0.1, 7.0.0.1, and 7.1.0.1 contain DOM-based/URL-based XSS via the topic parameter to html/index_main.htm across multiple help paths (e.g., help/sm/en/Output/wwhelp/wwhimpl/js/ and related locales). The vulnerability allows remote attackers ...

CVE-2012-6272

Multiple cross-site scripting XSS vulnerabilities in Dell OpenManage Server Administrator 6.5.0.1, 7.0.0.1, and 7.1.0.1 allow remote attackers to inject arbitrary web script or HTML via the topic parameter to html/indexmain.htm in 1 help/sm/en/Output/wwhelp/wwhimpl/js/, 2...

CVE-2012-6272: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Dell OpenManage Server Administrator 6.5.0.1, 7.0.0.1, and 7.1.0.1 allow remote attackers to inject arbitrary web script or HTML via the topic parameter to html/indexmain.htm in 1 help/sm/en/Output/wwhelp/wwhimpl/js/, 2...

PT-2013-1917

Name of the Vulnerable Software and Affected Versions Dell OpenManage Server Administrator versions 6.5.0.1 through 7.1.0.1 Description The issue allows remote attackers to inject arbitrary web script or HTML via the topic parameter to "html/index main.htm" in various help and message guide...

Dell OpenManage Server Administrator index_main.htm DOM-based XSS

The version of Dell OpenManage Server Administrator hosted on the remote web server has a cross-site scripting vulnerability. Making a specially crafted request for indexmain.htm can result in client-side script injection. An attacker could exploit this by tricking a user into requesting a...

Dell OpenManage Server Administrator - Cross-Site Scripting

Dell OpenManage Server Administrator - Cross-Site Scripting source: https://www.securityfocus.com/bid/57212/info Dell OpenManage Server Administrator is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to...

Dell OpenManage Server Administrator - Cross-Site Scripting

source: https://www.securityfocus.com/bid/57212/info Dell OpenManage Server Administrator is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Dell OpenManage Server Administrator omalogin.html DOM-based XSS

The version of Dell OpenManage Server Administrator hosted on the remote web server has a cross-site scripting vulnerability. Making a specially crafted request for omalogin.html can result in client-side script injection. An attacker could exploit this by tricking a user into requesting a...

CVE-2012-4955

Cross-site scripting XSS vulnerability in Dell OpenManage Server Administrator OMSA before 6.5.0.1, 7.0 before 7.0.0.1, and 7.1 before 7.1.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Dell OpenManage Server Administrator OMSA before 6.5.0.1, 7.0 before 7.0.0.1, and 7.1 before 7.1.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-4955

Cross-site scripting XSS vulnerability in Dell OpenManage Server Administrator OMSA before 6.5.0.1, 7.0 before 7.0.0.1, and 7.1 before 7.1.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-4955

Dell OpenManage Server Administrator (OMSA) prior to 6.5.0.1, 7.0 prior to 7.0.0.1, and 7.1 prior to 7.1.0.1 contains a cross-site scripting (XSS) vulnerability. The Nessus entry specifies DOM-based XSS in omalogin.html and mentions a related vector in omatasks.html, enabling remote attackers to ...

CVE-2012-4955: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Dell OpenManage Server Administrator OMSA before 6.5.0.1, 7.0 before 7.0.0.1, and 7.1 before 7.1.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2012-5688

Name of the Vulnerable Software and Affected Versions Dell OpenManage Server Administrator versions prior to 6.5.0.1 Dell OpenManage Server Administrator versions 7.0 through 7.0.0.0 Dell OpenManage Server Administrator versions 7.1 through 7.1.0.0 Description A cross-site scripting XSS issue...

Dell OpenManage Server Administrator contains a cross-site scripting vulnerability

Overview Dell OpenManage Server Administrator version 7.1 and earlier contains a cross-site scripting vulnerability. Description Dell OpenManage Server Administrator version 7.1 and earlier contains a cross-site scripting vulnerability CWE-79. --- Impact A remote attacker may be able to execute...

Dell OpenManage Server Administrator 'HelpViewer' Redirect

Dell OpenManage Server Administrator appears to be installed on the remote host. The installed version fails to validate input passed to the 'file' parameter in '/servlet/HelpViewer' before redirecting an unauthenticated user to the location it specifies. An attacker may be able to exploit this...

CVE-2006-3470

The Dell Openmanage CD launches X11 and SSH daemons that do not require authentication, which allows remote attackers to gain privileges...

CVE-2006-3470

The Dell Openmanage CD launches X11 and SSH daemons that do not require authentication, which allows remote attackers to gain privileges...

CVE-2006-3470

The CVE-2006-3470 entry concerns the Dell OpenManage CD, where X11 and SSH daemons are launched without authentication. This allows remote attackers to gain privileges on affected systems. The available connected documents confirm the vulnerability is due to unauthenticated services started by th...