1320 matches found
CVE-2006-4241
CVE-2006-4241 affects the Mambo component com_reporter, specifically the processor/reporter.sql.php file. The vulnerability is a PHP remote file inclusion that allows an attacker to execute arbitrary PHP code by supplying a URL in the mosConfig_absolute_path parameter. The CVSS base score is 7.5 ...
Mambo Component Reporter 1.0 - 'Reporter.sql.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/19553/info Reporter a Mambo component is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include arbitrary remote files containing malicious PHP code and execute...
eIQnetworks Enterprise Security Analyzer License Manager Detection
The remote host is running a license manager for eIQnetworks Enterprise Security Analyzer ESA, a security information and event management application. Note that eIQnetworks Enterprise Security Analyzer is also included in third-party products such as Astaro Report Manager, Fortinet FortiReporter...
eIQnetworks Enterprise Security Analyzer Syslog Server Detection (deprecated)
Plugin has been deprecated as the software is EOL and no longer obtainable %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid22126; scriptversion"1.14"; scriptsetattributeattribute:"pluginmodificationdate",...
bluecoat7111.txt
Blue Coat Reporter 7.1.1.1 - multiple remote vulnerabilities ============================================================ Blue Coat Reporter ================== "Blue Coat Reporter 7 provides identity-based reporting on Web communications enabling enterprises to evaluate Web policies and manage...
CVE-2005-1710
Multiple cross-site scripting XSS vulnerabilities in Blue Coat Reporter before 7.1.2 allow remote attackers to inject arbitrary web script or HTML via 1 the username in an Add User window or 2 the license key volatile.licensetoadd parameter in the Licensing page...
CVE-2005-1708
templates.admin.users.userformprocessing in Blue Coat Reporter before 7.1.2 allows authenticated users to gain administrator privileges via an HTTP POST that sets volatile.user.administrator to true...
CVE-2005-1710
Affected software: Blue Coat Reporter prior to version 7.1.2. Vulnerability: multiple cross-site scripting (XSS) vulnerabilities. Root cause/ vectors: attacker-supplied data can be injected into web pages via (1) the username field in the Add User window, or (2) the volatile.license_to_add parame...
CVE-2005-1708
templates.admin.users.userformprocessing in Blue Coat Reporter before 7.1.2 allows authenticated users to gain administrator privileges via an HTTP POST that sets volatile.user.administrator to true...
CVE-2005-1708
The CVE affects Blue Coat Reporter before 7.1.2, where templates.admin.users.user_form_processing allows an authenticated user to elevate to administrator by sending an HTTP POST that sets volatile.user.administrator to true. Root cause is improper handling of admin-flag assignment via user form ...
CVE-2005-1709
CVE-2005-1709 concerns Blue Coat Reporter before version 7.1.2. The connected documentation provides no exact root-cause or vulnerable component details beyond the vendor/product scope. The entry states that remote unauthenticated attackers can add a license, implying modification of licensing da...
CVE-2005-1709
Unknown vulnerability in Blue Coat Reporter before 7.1.2 allows remote unauthenticated attackers to add a license...
CVE-2005-1710
Multiple cross-site scripting XSS vulnerabilities in Blue Coat Reporter before 7.1.2 allow remote attackers to inject arbitrary web script or HTML via 1 the username in an Add User window or 2 the license key volatile.licensetoadd parameter in the Licensing page...
CVE-2005-1709
Unknown vulnerability in Blue Coat Reporter before 7.1.2 allows remote unauthenticated attackers to add a license...
Blue Coat Reporter 7.0/7.1 - License HTML Injection
source: https://www.securityfocus.com/bid/13725/info Blue Coat Reporter is prone to an HTML injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code...
[SA15452] Blue Coat Reporter Multiple Unspecified Vulnerabilities
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
Blue Coat Reporter 7.07.1 - Privilege Escalation
Blue Coat Reporter 7.07.1 - Privilege Escalation source: https://www.securityfocus.com/bid/13723/info Blue Coat Reporter is prone to a remote privilege escalation vulnerability. This issue is due to a failure in the application to properly authenticate a user prior to permitting access to...
Blue Coat Reporter 7.07.1 - License HTML Injection
Blue Coat Reporter 7.07.1 - License HTML Injection source: https://www.securityfocus.com/bid/13725/info Blue Coat Reporter is prone to an HTML injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generat...
CVE-2003-0305
The Service Assurance Agent SAA in Cisco IOS 12.0 through 12.2, aka Response Time Reporter RTR, allows remote attackers to cause a denial of service crash via malformed RTR packets to port 1967...