Novell Sentinel Log Manager Retention Policy Security Restriction Bypass

A policy bypass vulnerability has been reported in Novell Sentinel Log Manager. The vulnerability is due to insufficient validation of incoming requests. A remote attacker can exploit this vulnerability by sending a specially crafted request to the target. Successful exploitation would allow...

Novell Sentinel Log Manager Retention Policy Security Bypass Vulnerability

Novell Sentinel Log Manager is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Novell Sentinel Log Manager Authentication Bypass

The version of Novell Sentinel Log Manager hosted on the remote web server has an authentication bypass vulnerability. It is possible to execute GWT-RPC methods without authentication. A remote, unauthenticated attacker could exploit this to perform actions that should require administrative...

Novell Sentinel Log Manager Web Detection

The web management interface for Novell Sentinel Log Manager formerly known as NetIQ Sentinel Log Manager was detected on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid62967; scriptversion"1.3"; scriptcvsdate"Date: 2019/11/22";...

CVE-2011-5226

Cross-site request forgery CSRF vulnerability in wordpresssentinel.php in the Sentinel plugin 1.0.0 for WordPress allows remote attackers to hijack the authentication of an administrator for requests that trigger snapshots...

CVE-2011-5225

Cross-site scripting XSS vulnerability in wordpresssentinel.php in the Sentinel plugin 1.0.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in wordpresssentinel.php in the Sentinel plugin 1.0.0 for WordPress allows remote attackers to hijack the authentication of an administrator for requests that trigger snapshots...

Cross site scripting

Cross-site scripting XSS vulnerability in wordpresssentinel.php in the Sentinel plugin 1.0.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

Sql injection

SQL injection vulnerability in the Sentinel plugin 1.0.0 for WordPress allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2011-5226

Cross-site request forgery CSRF vulnerability in wordpresssentinel.php in the Sentinel plugin 1.0.0 for WordPress allows remote attackers to hijack the authentication of an administrator for requests that trigger snapshots...

CVE-2011-5225

Cross-site scripting XSS vulnerability in wordpresssentinel.php in the Sentinel plugin 1.0.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2011-5224

CVE-2011-5224 describes an SQL injection vulnerability in the WordPress Sentinel plugin, version 1.0.0. The issue allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Affected software: Sentinel plugin for WordPress (1.0.0). Root cause: unsafeguarded SQL handling in ...

CVE-2011-5225

CVE-2011-5225 affects the WordPress Sentinel plugin (v1.0.0). The vulnerability is an XSS in wordpress_sentinel.php that allows remote attackers to inject arbitrary web script or HTML via unknown vectors. Impact is reflected in the NVD entry with a base score of 4.3 (Medium); confidentiality rema...

CVE-2011-5226

CVE-2011-5226: A CSRF flaw in wordpress_sentinel.php of the WordPress Sentinel plugin (version 1.0.0) allows remote attackers to hijack an administrator’s session by crafting requests that trigger snapshots. This affects the Sentinel plugin for WordPress; exploitation context and in-the-wild deta...

CVE-2011-5224

SQL injection vulnerability in the Sentinel plugin 1.0.0 for WordPress allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

WordPress Sentinel Plugin <= 1.0.0 - CSRF

Because of this vulnerability in wordpresssentinel.php, the attackers can hijack the authentication of an administrator for requests that trigger snapshots. Solution Update the plugin...

WordPress Sentinel Plugin <= 1.0.0 - SQL iNJECTION

Because of this vulnerability, the attackers can execute arbitrary SQL commands via unspecified vectors. Solution Update the plugin...

CVE-2011-5225: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in wordpresssentinel.php in the Sentinel plugin 1.0.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2011-5226: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in wordpresssentinel.php in the Sentinel plugin 1.0.0 for WordPress allows remote attackers to hijack the authentication of an administrator for requests that trigger snapshots...

CVE-2011-5224: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Sentinel plugin 1.0.0 for WordPress allows remote attackers to execute arbitrary SQL commands via unspecified vectors...