Dell KACE K1000 Systems Management Appliance 'LABEL_ID'参数跨站脚本漏洞

BUGTRAQ ID: 65333 CVECAN ID: CVE-2014-0330 Dell KACE K1000是系统管理解决方案。 Dell KACE K1000系统管理设备5.5.90545版本及其他版本的adminui/userlist.php存在跨站脚本漏洞，远程攻击者可通过LABELID参数，利用此漏洞注入任意Web脚本或HTML。 0 Dell Kace 1000 Systems Management Appliance 5.5.90545 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Dell Kace 1000 Systems Management Appliance多个SQL注入漏洞

BUGTRAQ ID: 65029 Dell Kace 1000 Systems Management Appliance是系统管理设备。 Dell Kace 1000 Systems Management Appliance 5.4.76847及其他版本没有正确过滤getUploadPath及getKBot SOAP方法的"macAddress"参数值，可导致注入任意SQL代码，从而操作SQL查询。 0 Dell Kace 1000 Systems Management Appliance 5.4.76847 厂商补丁： Dell ----...

Dell Kace 1000 Systems Management Appliance DS-2014-001 - Multiple SQL Injections

Dell Kace 1000 Systems Management Appliance DS-2014-001 - Multiple SQL Injections source: https://www.securityfocus.com/bid/65029/info Dell Kace 1000 Systems Management Appliance is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input befor...

Dell KACE K1000 Systems Management Appliance (SMA) Detection

Detection of Dell KACE K1000 Systems Management Appliance. The script sends a connection request to the server and attempts to extract the version number from the reply. This VT has been deprecated and replaced by the VT SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be...

Dell Kace 1000 SMA 5.4.742 SQL Injection

Title: ====== Dell Kace 1000 SMA 5.4.742 - SQL Injection Vulnerabilities Date: ===== 2013-07-22 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=832 VL-ID: ===== 832 Common Vulnerability Scoring System: ==================================== 7.5 Introduction: =============...

Dell Kace 1000 SMA 5.4.70402 - Persistent Cross-Site Scripting

Dell Kace 1000 SMA 5.4.70402 - Persistent Cross-Site Scripting Title: ====== Dell Kace 1000 SMA v5.4.70402 - Persistent Vulnerabilities Date: ===== 2013-07-16 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=833 VL-ID: ===== 833 Common Vulnerability Scoring System:...

Dell Kace 1000 SMA 5.4.70402 - Persistent Cross-Site Scripting

Title: ====== Dell Kace 1000 SMA v5.4.70402 - Persistent Vulnerabilities Date: ===== 2013-07-16 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=833 VL-ID: ===== 833 Common Vulnerability Scoring System: ==================================== 3.5 Introduction: =============...

Dell Kace 1000 SMA 5.4.70402 Cross Site Scripting

Title: ====== Dell Kace 1000 SMA v5.4.70402 - Persistent Vulnerabilities Date: ===== 2013-07-16 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=833 VL-ID: ===== 833 Common Vulnerability Scoring System: ==================================== 3.5 Introduction: =============...

Dell Kace 1000 SMA v5.4.70402 - Persistent Vulnerabilities

Document Title: =============== Dell Kace 1000 SMA v5.4.70402 - Persistent Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=833 Release Date: ============= 2013-07-15 Vulnerability Laboratory ID VL-ID: ====================================...

Dell Kace 1000 SMA v5.4.70402 - Persistent Vulnerabilities

Document Title: =============== Dell Kace 1000 SMA v5.4.70402 - Persistent Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=833 Release Date: ============= 2013-07-15 Vulnerability Laboratory ID VL-ID: ====================================...

Microsoft System Center Configuration Manager跨站脚本执行漏洞（MS12-062)

BUGTRAQ ID: 55430 CVE ID: CVE-2012-2536 系统中心配置管理器2007 R2（System Center Configuration Manager 2007 R2）—以前被称为 Systems Management Server SMS —是在物理、虚拟、分布以及移动环境之间综合评估、配置和升级服务器、客户端和设备的解决方案。 System Center Configuration Manager中存在XSS漏洞，代码可被反注入到用户的结果页面，导致单击后执行攻击者控制的代码。 0 Microsoft Systems Management Serve...

Microsoft System Center Configuration Manager XSS Vulnerability (2741528)

This host is missing an important security update according to Microsoft Bulletin MS12-062. OpenVAS Vulnerability Test $Id: secpodms12-062.nasl 6520 2017-07-04 14:28:49Z cfischer $ Microsoft System Center Configuration Manager XSS Vulnerability 2741528 Authors: Rachana Shetty Copyright: Copyright...

CVE-2012-2536

Cross-site scripting XSS vulnerability in Microsoft Systems Management Server 2003 SP3 and System Center Configuration Manager 2007 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Reflected XSS Vulnerability."...

Cross site scripting

Cross-site scripting XSS vulnerability in Microsoft Systems Management Server 2003 SP3 and System Center Configuration Manager 2007 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Reflected XSS Vulnerability."...

CVE-2012-2536

Cross-site scripting XSS vulnerability in Microsoft Systems Management Server 2003 SP3 and System Center Configuration Manager 2007 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Reflected XSS Vulnerability."...

CVE-2012-2536

CVE-2012-2536 corresponds to a reflected XSS in Microsoft Systems Management Server 2003 SP3 and System Center Configuration Manager 2007 SP2. Reports (MS12-062/MSBK entries and related advisories) detail that specially crafted requests can cause arbitrary script/HTML to run in a user’s browser o...

CVE-2012-2536: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Microsoft Systems Management Server 2003 SP3 and System Center Configuration Manager 2007 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Reflected XSS Vulnerability."...

MS12-062: Vulnerability in System Center Configuration Manager Could Allow Elevation of Privilege (2741528)

The version of Microsoft System Center Configuration Manager, formerly known as Systems Management Server, installed on the remote host is potentially affected by a reflected cross-site scripting vulnerability. By tricking a user into clicking a specially crafted link, an attacker could gain...

Microsoft SMS / SCCM Installed (Windows)

Microsoft System Center Configuration Manager SCCM, formerly known as Systems Management Server SMS, a systems management application is installed on the remote Windows host. C Tenable, Inc. include"compat.inc"; if description scriptid62028; scriptversion"1.11";...

HP Systems Insight Manager Detection (credentialed check)

HP Systems Insight Manager, a web-based application for managing remote systems, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid59683; scriptversion"1.7"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/10...