IBM Web Experience Factory Multiple XSS Vulnerabilities

IBM Web Experience Factory is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

HP Managed Printing Administration Multiple Vulnerabilities

HP Managed Printing Administration is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Sunway ForceControl Multiple Vulnerabilities

The host is running Sunway ForceControl and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbsunwayforcecontrolmultvuln.nasl 7044 2017-09-01 11:50:59Z teissa $ Sunway ForceControl Multiple Vulnerabilities Authors: Madhuri D Copyright: Copyright c 2011 Greenbone Networks Gmb...

SA-CONTRIB-2011-056 - Webform Validation Cross Site Scripting

The Webform Validation module enables you to add form validation rules to Webform components through a UI. The module contains multiple cross site scripting XSS vulnerabilities due to the fact that it fails to sanitize certain user entered text prior to displaying in the browser. This vulnerabili...

HP Intelligent Management Center iNodeMngChecker.exe Buffer Overflow (CVE-2011-1867)

A remote code execution vulnerability has been reported in the HP Intelligent Management Center User Access Manager UAM and Endpoint Admission Defense EAD. The vulnerability is due to insufficient user input data validation by the application. A remote attacker could exploit this vulnerability by...

Embedthis GoAhead 2.5 'name' and 'address' XSS Vulnerabilities - Active Check

Embedthis GoAhead is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

DreamBox DM800 - file Local File Disclosure

DreamBox DM800 - file Local File Disclosure source: https://www.securityfocus.com/bid/50520/info DreamBox DM800 is prone to a local file-disclosure vulnerability because it fails to adequately validate user-supplied input. Exploiting this vulnerability would allow an attacker to obtain potentiall...

CVE-2011-1985

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate user-mode input, which allows local users to gain privileges or cause a denial of...

ezCourses Security Bypass Vulnerability (Oct 2011) - Active Check

ezCourses is prone to a security bypass vulnerability because it fails to properly validate user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

APC PowerChute Network Shutdown 'security/applet' Cross Site Scripting Vulnerability

APC PowerChute Network Shutdown is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

S40 Content Management System (CMS) Cross-Site Scripting Vulnerability

S40 Content Management System CMS is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

foomatic-gui python-foomatic 0.7.9.4 - pysmb.py Arbitrary Shell Command Execution

foomatic-gui python-foomatic 0.7.9.4 - pysmb.py Arbitrary Shell Command Execution source: https://www.securityfocus.com/bid/48982/info foomatic-gui is prone to a remote arbitrary shell-command-execution vulnerability because the application fails to properly sanitize user-supplied input. An...

PT-2011-14: SQL injection vulnerability in BoonEx Dolphin

Positive Research Center has discovered an SQL injection vulnerability in Dolphin 6.1. Application incorrectly validates input data. That allows attackers to conduct SQL injection attack. "SQL Injection" is a way to bypass network protection and attack the database. Settings transferred to the...

PikaCMS - Multiple Local File Disclosure Vulnerabilities

PikaCMS - Multiple Local File Disclosure Vulnerabilities source: https://www.securityfocus.com/bid/48068/info PikaCMS is prone to multiple local file-disclosure vulnerabilities because it fails to adequately validate user-supplied input. Exploiting these vulnerabilities may allow an attacker to...

Joomla Component 'com_maplocator' SQLi Vulnerability

Joomla with commaplocator component is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Cisco Unified Operations Manager Common Services Device Center Cross-Site Scripting Vulnerability

Cisco Unified Operations Manager contains a cross-site scripting vulnerability that could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks. The vulnerability is due to improper validation of user input supplied to the Common Services Device Center component used b...

PhpAlbum.net 0.4.1-14_fix06 - 'var3' Remote Command Execution

source: https://www.securityfocus.com/bid/47369/info PhpAlbum.net is prone to a remote command-execution vulnerability because it fails to properly validate user-supplied input. An attacker can exploit this issue to execute arbitrary commands within the context of the vulnerable process...

HTB22911: XSS in Eleanor CMS

Vulnerability ID: HTB22911 Reference: http://www.htbridge.ch/advisory/xssineleanorcms.html Product: Eleanor CMS Vendor: Eleanor CMS http://eleanor-cms.ru/ Vulnerable Version: rc5 Vendor Notification: 22 March 2011 Vulnerability Type: XSS Cross Site Scripting Status: Fixed by Vendor Risk level:...

Microsoft Forefront UAG Signurl.asp Cross-Site Scripting (MS10-089; CVE-2010-3936)

Microsoft Forefront Unified Access Gateway UAG is designed to provide secure remote access to corporate resources for employees, partners and vendors from both managed and unmanaged PCs and mobile devices. UAG provides a variety of connection options including SSL VPN, Microsoft DirectAccess and...

CVE-2011-0087

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold and SP2 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "Win32k Insufficient User Input...