CVE-2010-2502

CVE-2010-2502 affects Splunk Web in Splunk 4.0.x (before 4.0.11) and 4.1.x (before 4.1.2). It enables directory traversal to read arbitrary files (SPL-31194); remote authenticated users can modify arbitrary files (SPL-31063); and there is an unknown impact via redirects (SPL-31067). Remediation n...

CVE-2010-2503: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Splunk 4.0 through 4.0.10 and 4.1 through 4.1.1 allow remote attackers to inject arbitrary web script or HTML via 1 redirects, aka SPL-31067; 2 unspecified "user-user or user-admin" vectors, aka SPL-31084; or 3 unspecified "user input," aka...