74 matches found
Tine 2.0 - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/50307/info Tine is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. An attacker could exploit these vulnerabilities to execute arbitrary script code in the context of the...
Multiple vulnerabilities in Tine 2.0
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Tine 2.0, which can be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerabilities in Tine 2.0 1.1 Input passed via the "lang" GET parameter to /library/idnaconvert/example.php i...
Tine 2.0 Cross Site Scripting
------------------------------------------------------------------------ Software................Tine 2.0 Vulnerability...........Reflected Cross-site Scripting Threat Level............Low 1/5 Download................http://www.tine20.org/ Discovery Date..........4/30/2011 Tested...
Tine 2.0 - vbook.php Cross-Site Scripting
Tine 2.0 - vbook.php Cross-Site Scripting source: https://www.securityfocus.com/bid/47669/info Tine is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of...
Tine 2.0 - 'vbook.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/47669/info Tine is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of th...
CVE-2011-1666
Metaways Tine 2.0 allows remote attackers to obtain sensitive information via unknown vectors in 1 Crm/Controller.php, 2 Crm/Export/Csv.php, or 3 Calendar/Model/Attender.php, which reveal the full installation path...
Path traversal
Metaways Tine 2.0 allows remote attackers to obtain sensitive information via unknown vectors in 1 Crm/Controller.php, 2 Crm/Export/Csv.php, or 3 Calendar/Model/Attender.php, which reveal the full installation path...
CVE-2011-1666
Metaways Tine 2.0 allows remote attackers to obtain sensitive information via unknown vectors in 1 Crm/Controller.php, 2 Crm/Export/Csv.php, or 3 Calendar/Model/Attender.php, which reveal the full installation path...
CVE-2011-1666
Metaways Tine 2.0 allows remote attackers to obtain sensitive information via unknown vectors in 1 Crm/Controller.php, 2 Crm/Export/Csv.php, or 3 Calendar/Model/Attender.php, which reveal the full installation path...
CVE-2011-1666
Metaways Tine 2.0 is affected by CVE-2011-1666, which allows remote attackers to disclose the full installation path via error output in certain components: Crm/Controller.php, Crm/Export/Csv.php, and Calendar/Model/Attender.php. The root cause is path disclosure through error messages when php_d...
CVE-2011-1666: Exposure of Sensitive Information to an Unauthorized Actor
Metaways Tine 2.0 allows remote attackers to obtain sensitive information via unknown vectors in 1 Crm/Controller.php, 2 Crm/Export/Csv.php, or 3 Calendar/Model/Attender.php, which reveal the full installation path...
PT-2011-3277
Name of the Vulnerable Software and Affected Versions Metaways Tine 2.0 Description The issue allows remote attackers to obtain sensitive information via unknown vectors in certain files, including 1 Crm/Controller.php, 2 Crm/Export/Csv.php, or 3 Calendar/Model/Attender.php. This reveals the full...
HTB22909: Path disclosure in Tine 2.0
Vulnerability ID: HTB22909 Reference: http://www.htbridge.ch/advisory/pathdisclosureintine20.html Product: Tine 2.0 Vendor: Metaways Infosystems GmbH http://www.tine20.org/ Vulnerable Version: Neele 2011-01-2 Vendor Notification: 17 March 2011 Vulnerability Type: Path disclosure Status: Fixed by...
Installation Path Disclosure weakness in Tine 2.0
High-Tech Bridge SA Security Research Lab has discovered a weakness in Tine 2.0 which could be exploited to gain access to potentially sensitive information. 1 Installation path disclosure weakness in Tine 2.0: CVE-2011-1666 The weakness exists due to application reveals the full path to...