106 matches found
PT-2020-3664
Name of the Vulnerable Software and Affected Versions PowerChute Business Edition versions 9.0.x and earlier Description The issue is related to insufficient input validation, which could allow a remote attacker to execute arbitrary code. This can occur when a script is executed during a shutdown...
APC PowerChute Plus 4.2.2 - Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/83/info APC PowerChute PLUS is a software package that will safely shutdown computer systems locally or accross a network when UPS power starts to fail. When operating PowerChute PLUS normally listens to TCP ports 6547 an...
APC PowerChute Business Edition Unspecified Cross Site Scripting Vulnerability
APC PowerChute Business Edition is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
APC PowerChute Business Edition Unspecified Cross Site Scripting Vulnerability
This host is running APC PowerChute Business Edition and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: secpodapcpowerchutebusinessedtnxssvuln.nasl 7044 2017-09-01 11:50:59Z teissa $ APC PowerChute Business Edition Unspecified Cross Site Scripting Vulnerability...
CVE-2011-4263
Cross-site scripting XSS vulnerability in Schneider Electric PowerChute Business Edition before 8.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in Schneider Electric PowerChute Business Edition before 8.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2011-4263
Cross-site scripting XSS vulnerability in Schneider Electric PowerChute Business Edition before 8.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2011-4263
CVE-2011-4263 affects Schneider Electric APC PowerChute Business Edition prior to 8.5, with a cross-site scripting (XSS) vulnerability that could allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Multiple sources (NVD, JVN, Red Hat, OpenVAS entries) corroborat...
PT-2011-4916
Name of the Vulnerable Software and Affected Versions Schneider Electric PowerChute Business Edition versions prior to 8.5 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. This could potentially lead to unauthorized actions on the affect...
CVE-2011-4263: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Schneider Electric PowerChute Business Edition before 8.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
KLA10049 CI vulnerability in APC PowerChute
A cross-site scripting vulnerability was found in PowerChute. By exploiting this vulnerability malicious users can inject arbitrary web script. This vulnerability can be exploited from the network at a point related to unknown vectors. Original advisories vulnerability description Exploitation...
PowerChute Business Edition vulnerable to cross-site scripting
Overview PowerChute Business Edition contains a cross-site scripting vulnerability. PowerChute Business Edition from Schneider Electric is a power management software. PowerChute Business Edition contains a cross-site scripting vulnerability. Jun Okada of GLOBAL TECHNOLOGY CORPORATION reported th...
JVN#61695284: PowerChute Business Edition vulnerable to cross-site scripting
PowerChute Business Edition from Schneider Electric is a power management software. PowerChute Business Edition contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Upgrade the software Upgrade to the latest version accordin...
APC PowerChute Network Shutdown 'security/applet' Cross Site Scripting Vulnerability
The host is running APC PowerChute Network Shutdown and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: secpodapcpcnsappletxssvuln.nasl 7044 2017-09-01 11:50:59Z teissa $ APC PowerChute Network Shutdown 'security/applet' Cross Site Scripting Vulnerability Authors:...
APC PowerChute Network Shutdown HTTP Response Splitting Vulnerability
The host is running APC PowerChute Network Shutdown and is prone to HTTP response splitting vulnerability. OpenVAS Vulnerability Test $Id: secpodapcpcnshttpresponsesplittingvuln.nasl 7052 2017-09-04 11:50:51Z teissa $ APC PowerChute Network Shutdown HTTP Response Splitting Vulnerability Authors:...
APC PowerChute Network Shutdown 'security/applet' Cross Site Scripting Vulnerability
APC PowerChute Network Shutdown is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
APC PowerChute Network Shutdown XSS
Digital Security Research Group DSecRG Advisory DSECRG-09-009 ------------------link to original advisory -------------------------- http://www.dsecrg.com/pages/vul/show.php?id=82 Application: APC PowerChute Network Shutdown's Web Interface Vendor URL: http://www.apc.com/ Bug: XSS/Response...
APC PowerChute Network Shutdown - HTTP Response Splitting Cross-Site Scripting
APC PowerChute Network Shutdown - HTTP Response Splitting Cross-Site Scripting source: https://www.securityfocus.com/bid/33924/info APC PowerChute Network Shutdown is prone to an HTTP-response-splitting vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize...
APC PowerChute Network Shutdown - HTTP Response Splitting / Cross-Site Scripting
source: https://www.securityfocus.com/bid/33924/info APC PowerChute Network Shutdown is prone to an HTTP-response-splitting vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary...
