CVE-2013-3004

Directory traversal vulnerability in BIRT-Report Viewer in IBM Tivoli Application Dependency Discovery Manager TADDM 7.1.x and 7.2.x before 7.2.1.5 allows remote authenticated users to read arbitrary files via unspecified vectors...

Directory traversal

Directory traversal vulnerability in BIRT-Report Viewer in IBM Tivoli Application Dependency Discovery Manager TADDM 7.1.x and 7.2.x before 7.2.1.5 allows remote authenticated users to read arbitrary files via unspecified vectors...

CVE-2013-3004

CVE-2013-3004 is a directory traversal vulnerability embedded in the IBM TADDM BIRT-Report Viewer component. The issue affects IBM TADDM 7.1.x and 7.2.x up to but before 7.2.1.5, where remote authenticated users could read arbitrary files on the server via unspecified vectors. The root cause is i...

CVE-2013-3004

Directory traversal vulnerability in BIRT-Report Viewer in IBM Tivoli Application Dependency Discovery Manager TADDM 7.1.x and 7.2.x before 7.2.1.5 allows remote authenticated users to read arbitrary files via unspecified vectors...

Crystal Report Viewer 8.0.0.371 - ActiveX Denial of Service Vulnerability

No description provided by source. html Crystal Reporting Viewer v8.0.0.371 Author: Matthew Bergin Website: www.berginpentesting.com Website: www.smashthestack.org object classid='clsid:C4847596-972C-11D0-9567-00A0C9273C2A' id='target' /object script language='vbscript' targetFile =...

How to install a standalone Veeam Report Viewer

Purpose You need to install a standalone Veeam Report Viewer to view offline reports. Solution There are several options to install Veeam Report Viewer: Veeam ONE ISO file : You can start Veeam Report Viewer setup from the ISO file: VeeamONE10.0.0.750.iso\Redistr\ReportViewer.msi. Veeam ONE...

How to Change Veeam Report Viewer Default VMR Storage Location

Purpose This article documents how to change the default path that Veeam Report Viewer uses to store VMR files. Solution The per-user configuration settings for Veeam Report Viewer are contained within the user.config file for the process. The path to the user.config varies between deployments an...

PHP Vulnerability Hunter v.1.1.4.6 - Automated fuzz testing tool

PHP Vulnerability Hunter v.1.1.4.6 - Automated fuzz testing tool This is the application that detected almost all of the web application vulnerabilities listed on the advisories page. PHP Vulnerability Hunter is an advanced automated whitebox fuzz testing tool capable of triggering a wide range o...

Microsoft Report Viewer crossite scripting

ActiveX crossite scripting...

Microsoft Report Viewer Cross Site Scripting

================================================== Cross-Site Scripting XSS in Microsoft ReportViewer Controls Adam Bixby - Gotham Digital Science [email protected] Public Release Date: 8/9/2011 Confirmed Affected Software: Microsoft Report Viewer Redistributable 2005 SP1 and Microsoft Visual...

Microsoft Report Viewer Information Disclosure Vulnerability (2578230)

This host is missing an important security update according to Microsoft Bulletin MS11-067. OpenVAS Vulnerability Test $Id: secpodms11-067.nasl 6532 2017-07-05 07:42:05Z cfischer $ Microsoft Report Viewer Information Disclosure Vulnerability 2578230 Authors: Veerendra GG Copyright: Copyright c 20...

Microsoft Report Viewer Information Disclosure Vulnerability (2578230)

This host is missing an important security update according to Microsoft Bulletin MS11-067. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2011-1976

Cross-site scripting XSS vulnerability in the Report Viewer Control in Microsoft Visual Studio 2005 SP1 and Report Viewer 2005 SP1 allows remote attackers to inject arbitrary web script or HTML via a parameter in a data source, aka "Report Viewer Controls XSS Vulnerability."...

Cross site scripting

Cross-site scripting XSS vulnerability in the Report Viewer Control in Microsoft Visual Studio 2005 SP1 and Report Viewer 2005 SP1 allows remote attackers to inject arbitrary web script or HTML via a parameter in a data source, aka "Report Viewer Controls XSS Vulnerability."...

CVE-2011-1976

CVE-2011-1976 is a cross-site scripting (XSS) vulnerability in the Report Viewer Controls for Microsoft Visual Studio 2005 SP1 and Report Viewer 2005 SP1. Affected component is Microsoft.ReportViewer.WebForms.dll; attacker-controlled input via the TimerMethod URL parameter is incorporated into a ...

CVE-2011-1976

Cross-site scripting XSS vulnerability in the Report Viewer Control in Microsoft Visual Studio 2005 SP1 and Report Viewer 2005 SP1 allows remote attackers to inject arbitrary web script or HTML via a parameter in a data source, aka "Report Viewer Controls XSS Vulnerability."...

Microsoft Visual Studio报告查看器控件跨站脚本漏洞

Bugtraq ID: 49033 Microsoft Visual Studio是一款微软公司的开发工具套件系列产品。 传递给Microsoft Visual Studio报告查看器控件的输入在返回用户之前缺少过滤，攻击者可以利用漏洞进行跨站脚本攻击，可在目标用户浏览器上执行任意HTML和脚本代码，可获得敏感信息或劫持用户会话。 Microsoft Visual Studio 2005 Team Edition Microsoft Visual Studio 2005 Standard Edition Microsoft Visual Studio 2005 Professional...

Microsoft Visual Studio Report Viewer 2005 Control - Multiple Cross-Site Scripting Vulnerabilities

Microsoft Visual Studio Report Viewer 2005 Control - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/49033/info Microsoft Visual Studio is prone to multiple cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An...

MS11-067: Vulnerability in Microsoft Report Viewer could allow information disclosure: August 9, 2011

Resolves security vulnerabilities that exist in Microsoft Report Viewer that could allow arbitrary code to run when a maliciously modified file is opened.IntroductionMicrosoft has released security bulletin MS11-067. To view the complete security bulletin, visit one of the following Microsoft...

Microsoft Report Viewer TimeMethod Information Disclosure (MS11-067; CVE-2011-1976)

An information disclosure vulnerability has been reported in Microsoft Report Viewer control. The vulnerability is due to improper validation of user input within a TimeMethod parameter. A remote attacker can exploit this issue by enticing a target user to visit a malicious web page. Successful...