1478 matches found
CVE-2005-1710
Affected software: Blue Coat Reporter prior to version 7.1.2. Vulnerability: multiple cross-site scripting (XSS) vulnerabilities. Root cause/ vectors: attacker-supplied data can be injected into web pages via (1) the username field in the Add User window, or (2) the volatile.license_to_add parame...
CVE-2005-1708
The CVE affects Blue Coat Reporter before 7.1.2, where templates.admin.users.user_form_processing allows an authenticated user to elevate to administrator by sending an HTTP POST that sets volatile.user.administrator to true. Root cause is improper handling of admin-flag assignment via user form ...
CVE-2005-1708
templates.admin.users.userformprocessing in Blue Coat Reporter before 7.1.2 allows authenticated users to gain administrator privileges via an HTTP POST that sets volatile.user.administrator to true...
CVE-2005-1709
Unknown vulnerability in Blue Coat Reporter before 7.1.2 allows remote unauthenticated attackers to add a license...
CVE-2005-1709
CVE-2005-1709 concerns Blue Coat Reporter before version 7.1.2. The connected documentation provides no exact root-cause or vulnerable component details beyond the vendor/product scope. The entry states that remote unauthenticated attackers can add a license, implying modification of licensing da...
CVE-2005-1710
Multiple cross-site scripting XSS vulnerabilities in Blue Coat Reporter before 7.1.2 allow remote attackers to inject arbitrary web script or HTML via 1 the username in an Add User window or 2 the license key volatile.licensetoadd parameter in the Licensing page...
CVE-2005-1709
Unknown vulnerability in Blue Coat Reporter before 7.1.2 allows remote unauthenticated attackers to add a license...
Blue Coat Reporter 7.0/7.1 - License HTML Injection
source: https://www.securityfocus.com/bid/13725/info Blue Coat Reporter is prone to an HTML injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code...
CVE-2005-1708: Undefined Security Weakness
templates.admin.users.userformprocessing in Blue Coat Reporter before 7.1.2 allows authenticated users to gain administrator privileges via an HTTP POST that sets volatile.user.administrator to true...
Blue Coat Reporter 7.07.1 - Privilege Escalation
Blue Coat Reporter 7.07.1 - Privilege Escalation source: https://www.securityfocus.com/bid/13723/info Blue Coat Reporter is prone to a remote privilege escalation vulnerability. This issue is due to a failure in the application to properly authenticate a user prior to permitting access to...
[SA15452] Blue Coat Reporter Multiple Unspecified Vulnerabilities
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
CVE-2005-1710: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in Blue Coat Reporter before 7.1.2 allow remote attackers to inject arbitrary web script or HTML via 1 the username in an Add User window or 2 the license key volatile.licensetoadd parameter in the Licensing page...
CVE-2005-1709: Undefined Security Weakness
Unknown vulnerability in Blue Coat Reporter before 7.1.2 allows remote unauthenticated attackers to add a license...
Blue Coat Reporter 7.07.1 - License HTML Injection
Blue Coat Reporter 7.07.1 - License HTML Injection source: https://www.securityfocus.com/bid/13725/info Blue Coat Reporter is prone to an HTML injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generat...
CVE-2005-0641: Undefined Security Weakness
Cross-site scripting XSS vulnerability in the Reporter for Computer Associates CA Unicenter Asset Management UAM 4.0 allows remote attackers to inject arbitrary HTML or web script via the 1 name or 2 description in a report template...
CVE-2003-0305
The Service Assurance Agent SAA in Cisco IOS 12.0 through 12.2, aka Response Time Reporter RTR, allows remote attackers to cause a denial of service crash via malformed RTR packets to port 1967...