McAfee UTM Firewall Help Reflected Cross-Site Scripting

Advisory Information Advisory ID: NGENUITY-2010-005 Date published: 6/9/2010 Vulnerability Information Class: Reflected Cross-Site Scripting XSS Software Description McAfee UTM Firewall Firmware 3.0.0 to 4.0.6 formerly SnapGear is the affected product line. More information can be found at...

McAfee UTM Firewall Cross Site Scripting

Advisory Information Advisory ID: NGENUITY-2010-005 Date published: 6/9/2010 Vulnerability Information Class: Reflected Cross-Site Scripting XSS Software Description McAfee UTM Firewall Firmware 3.0.0 to 4.0.6 formerly SnapGear is the affected product line. More information can be found at...

EGroupware 1.6.002 / EGroupware Premium Line 9.1 Multiple Vulnerability

Exploit for unknown platform in category web applications ========================================================================= EGroupware 1.6.002 / EGroupware Premium Line 9.1 Multiple Vulnerabilities ========================================================================= Advisory Name:...

eGroupWare 1.6.002 and eGroupWare premium line 9.1 - Multiple Vulnerabilities

eGroupWare 1.6.002 and eGroupWare premium line 9.1 - Multiple Vulnerabilities Advisory Name: Remote Command Execution in EGroupware Vulnerability Class: Remote Command Execution Release Date: 2010-03-09 Affected Applications: Confirmed in EGroupware 1.4.001+.002 and 1.6.001+.002. EGroupware Premi...

FreeBSD : egroupware -- two vulnerabilities (e39caf05-2d6f-11df-aec2-000c29ba66d2)

Egroupware Team report : Nahuel Grisolia from CYBSEC S.A. Security Systems found two security problems in EGroupware : Serious remote command execution allowing to run arbitrary command on the web server by simply issuing a HTTP request!. A reflected cross-site scripting XSS. Both require NO vali...

egroupware -- two vulnerabilities

Egroupware Team report: Nahuel Grisolia from CYBSEC S.A. Security Systems found two security problems in EGroupware: Serious remote command execution allowing to run arbitrary command on the web server by simply issuing a HTTP request!. A reflected cross-site scripting XSS. Both require NO valid...

Hacktics Advisory Feb10: XSS in IBM WebSphere Portal & Lotus WCM

Hacktics Research Group Security Advisory http://www.hacktics.com/view=Resources7CAdvisory By Oren Hafif, Hacktics. 24-Feb-2010 =========== I. Overview =========== During a penetration test performed by Hacktics' experts, certain vulnerabilities were identified in an IBM Websphere Portal Server a...

webcit-multi.txt

Vendor contacted: 2007-06-24 Affects: Webcit 7.11 Fixed: 2007-07-06 WebCit 7.11 1. Background WebCit is the webfrontend to administer and use Citadel, which is an open-source groupware server. 2. Session Riding 2.I. Problem Description It is possible for an attacker to execute actions in the name...