CVE-2011-2763

The web interface on the LifeSize Room appliance LSRM13.5.3 11 and 4.7.18 allows remote attackers to execute arbitrary commands via a modified request to the LSRoomRemoting.doCommand function in gateway.php...

CVE-2011-2762

The LifeSize Room appliance LS_RM1_3.5.3 (11) web interface is affected by an authentication bypass vulnerability in gateway.php via LSRoom_Remoting.authenticate that lets an unauthenticated attacker gain admin access by tampering AMF data. A separate issue allows unauthenticated command executio...

CVE-2011-2762

The web interface on the LifeSize Room appliance LSRM13.5.3 11 allows remote attackers to bypass authentication via unspecified data associated with a "true" authentication status, related to AMF data and the LSRoomRemoting.authenticate function in gateway.php...

PT-2011-4073

Name of the Vulnerable Software and Affected Versions LifeSize Room appliance versions 3.5.3 through 4.7.18 Description The issue allows remote attackers to execute arbitrary commands via a modified request to the LSRoom Remoting.doCommand function in "gateway.php". Recommendations For versions...

CVE-2011-2763

The web interface on the LifeSize Room appliance LSRM13.5.3 11 and 4.7.18 allows remote attackers to execute arbitrary commands via a modified request to the LSRoomRemoting.doCommand function in gateway.php. Recent assessments: zeroSteiner at January 13, 2020 5:56pm UTC reported: The request to...

CVE-2011-2762: Improper Authentication

The web interface on the LifeSize Room appliance LSRM13.5.3 11 allows remote attackers to bypass authentication via unspecified data associated with a "true" authentication status, related to AMF data and the LSRoomRemoting.authenticate function in gateway.php...

CVE-2011-2763: Improper Input Validation

The web interface on the LifeSize Room appliance LSRM13.5.3 11 and 4.7.18 allows remote attackers to execute arbitrary commands via a modified request to the LSRoomRemoting.doCommand function in gateway.php...

PT-2011-4072

Name of the Vulnerable Software and Affected Versions LifeSize Room appliance version 3.5.3 Description The issue allows remote attackers to bypass authentication via unspecified data associated with a "true" authentication status, related to AMF data and the LSRoom Remoting.authenticate function...

LifeSize Room Vulnerabilities

Discovered: 07-13-11 By: Spencer McIntyre zeroSteiner SecureState R&D Team www.securestate.com Background: ----------- Multiple vulnerabilities within the LifeSize Room appliance. Vulnerability Summaries: ------------------------ Login page can be bypassed, granting administrative access to the w...

LifeSize Room appliance authentication bypass and arbitrary code injection vulnerability

Overview LifeSize Room appliance contains an authentication bypass and arbitrary code injection vulnerability when failing to sanitize input from unauthenticated clients. Description According to LifeSize's website "LifeSize Room combines an immersive, high definition video experience with a rich...

LifeSize Room 3.5.3 / 4.7.18 Command Injection

require 'msf/core' class Metasploit3 'LifeSize Room Command Injection', 'Description' = %q This module exploits a vulnerable resource in LifeSize Room versions 3.5.3 and 4.7.18 to inject OS commmands. LifeSize Room is an appliance and thus the environment is limited resulting in a small set of...

LifeSize Room Command Injection

Exploit for php platform in category web applications require 'msf/core' class Metasploit3 'LifeSize Room Command Injection', 'Description' = %q This module exploits a vulnerable resource in LifeSize Room versions 3.5.3 and 4.7.18 to inject OS commmands. LifeSize Room is an appliance and thus the...

LifeSize Room - Command Injection (Metasploit)

LifeSize Room - Command Injection Metasploit require 'msf/core' class Metasploit3 'LifeSize Room Command Injection', 'Description' = %q This module exploits a vulnerable resource in LifeSize Room versions 3.5.3 and 4.7.18 to inject OS commmands. LifeSize Room is an appliance and thus the...

LifeSize Room - Command Injection (Metasploit)

require 'msf/core' class Metasploit3 'LifeSize Room Command Injection', 'Description' = %q This module exploits a vulnerable resource in LifeSize Room versions 3.5.3 and 4.7.18 to inject OS commmands. LifeSize Room is an appliance and thus the environment is limited resulting in a small set of...

LulzSec's Leader Sabu can be at DefCon Security conference

LulzSec's Leader Sabu can be at DefCon Security conference LulzSec's Leader Sabu can be at DefCon Security conference in Las Vegas these days. According to a Article on PCMag , Author note some Tweet chat Between "Sabu" and "th3j35t3r". The LulzSec leader Sabu claimed to have been available in...

LifeSize Room Command Injection

This module exploits a vulnerable resource in LifeSize Room versions 3.5.3 and 4.7.18 to inject OS commands. LifeSize Room is an appliance and thus the environment is limited resulting in a small set of payload options. Module Options msf use exploit/unix/http/lifesize/room msf undefinedroom show...

PT-2011-3668

Name of the Vulnerable Software and Affected Versions A Really Simple Chat ARSC version 3.3-rc2 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the arsc user parameter to "base/admin/edit user.php", the arsc layout id parameter in...

Room Juice 'display.php' Cross Site Scripting Vulnerability

Room Juice is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to...

Room Juice <= 0.3.3 XSS Vulnerability - Active Check

Room Juice is prone to a cross-site scripting XSS vulnerability because it fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Room Juice 0.3.3 Cross Site Scripting

------------------------------------------------------------------------ Software................Room Juice 0.3.3 Vulnerability...........Reflected Cross-site Scripting Threat Level............Low 1/5 Download................http://grecni.com/roomjuice/ Discovery Date..........5/17/2011 Tested...