46 matches found
U.S. Dept Of Defense: Reflected XSS on a DoD website
A cross-site scripting vulnerability was found on a Department of Defense website which may trick a web user into executing a malicious script, potentially revealing a user's web session information or modify web content. @juliocesar was able to demonstrate this vulnerability by crafting a...
eXtplorer Cross-Site Request Forgery Vulnerability (CNVD-2015-06704)
eXtplorer is a PHP-based online file management program. A cross-site request forgery vulnerability exists in eXtplorer. It allows remote attackers to construct malicious URIs, trick users into parsing them, and can perform malicious actions in the context of the target user...
CVE-2014-2197
CVE-2014-2197 affects Cisco Unified Communications Domain Manager (CDM) in Unified CDM Application Software prior to 8.1.4. The Admin GUI did not properly implement access control, allowing remote authenticated users to modify administrative credentials via a crafted URL (Privilege Escalation typ...
soft lite serverworx 3.0 - Directory Traversal vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2346/info It is possible for a remote user to gain read access to directories and files outside the root directory of ServerWorx. Requesting a specially crafted URL composed of '../' or '.../' sequences will disclose an...
CVE-2012-4596
CVE-2012-4596 is a directory traversal vulnerability in McAfee Email Gateway (MEG) 7.0.0 and 7.0.1 . The issue allows remote authenticated users to bypass access restrictions and download arbitrary files via a crafted URL, potentially impacting confidentiality. The documents explicitly describe t...
