Visualware MyConnection Server File Upload Vulnerability

Visualware MyConnection Server is a software application from Visualware, Inc. Providing accurate measurements of network quality and performance ensures a great user experience. A file upload vulnerability exists in Visualware MyConnection Server 11.0b build 5382 and prior versions, which...

CVE-2021-27198

An issue was discovered in Visualware MyConnection Server before v11.1a. Unauthenticated Remote Code Execution can occur via Arbitrary File Upload in the web service when using a myspeed/sf?filename= URI. This application is written in Java and is thus cross-platform. The Windows installation run...

CVE-2021-27198

An issue was discovered in Visualware MyConnection Server before v11.1a. Unauthenticated Remote Code Execution can occur via Arbitrary File Upload in the web service when using a myspeed/sf?filename= URI. This application is written in Java and is thus cross-platform. The Windows installation run...

CVE-2021-27198

Visualware MyConnection Server is affected by an unauthenticated remote code execution vulnerability (CVE-2021-27198) present in versions prior to 11.1a. The issue arises via an arbitrary file upload in the web service through the myspeed/sf?filename= URI, enabling code execution on the server (W...

VisualWare MyConnection Server 11.x Remote Code Execution Vulnerability

Document Title: =============== VisualWare MyConnection Server 11.x Remote Code Execution Vulnerability References Source: ==================== https://www.securifera.com/advisories/cve-2021-27198/ https://myconnectionserver.visualware.com/download.html Release Date: ============= 2020-02-25...

CVE-2021-27198: Unrestricted Upload of File with Dangerous Type

An issue was discovered in Visualware MyConnection Server before v11.1a. Unauthenticated Remote Code Execution can occur via Arbitrary File Upload in the web service when using a myspeed/sf?filename= URI. This application is written in Java and is thus cross-platform. The Windows installation run...

CVE-2021-27509

In Visualware MyConnection Server before 11.0b build 5382, each published report is not associated with its own access code...

CVE-2021-27509: Incorrect Authorization

In Visualware MyConnection Server before 11.0b build 5382, each published report is not associated with its own access code...

Visualware MyConnection Server Security Vulnerability

Visualware MyConnection Server is a software application from Visualware, Inc. Providing accurate measurements of network quality and performance ensures a good user experience. A security vulnerability exists in Visualware MyConnection Server. The vulnerability stems from a published report that...

PT-2021-17485

Name of the Vulnerable Software and Affected Versions Visualware MyConnection Server versions prior to 11.0b build 5382 Description The issue arises because each published report is not associated with its own access code. Recommendations For versions prior to 11.0b build 5382, update to version...

Visualware MyConnection Server Web Detection

Binary data visualwaremyconnectionserverwebdetect.nbin...

Visualware MyConnection Server <= 8.2b Multiple XSS Vulnerabilities

Visualware MyConnection Server is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2015-2043

Multiple cross-site scripting XSS vulnerabilities in Visualware MyConnection Server 8.2b allow remote attackers to inject arbitrary web script or HTML via the 1 bt, 2 variable, or 3 et parameter to myspeed/db/historyitem...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Visualware MyConnection Server 8.2b allow remote attackers to inject arbitrary web script or HTML via the 1 bt, 2 variable, or 3 et parameter to myspeed/db/historyitem...

CVE-2015-2043

Multiple cross-site scripting XSS vulnerabilities in Visualware MyConnection Server 8.2b allow remote attackers to inject arbitrary web script or HTML via the 1 bt, 2 variable, or 3 et parameter to myspeed/db/historyitem...

CVE-2015-2043

CVE-2015-2043 affects Visualware MyConnection Server

CVE-2015-2043: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Visualware MyConnection Server 8.2b allow remote attackers to inject arbitrary web script or HTML via the 1 bt, 2 variable, or 3 et parameter to myspeed/db/historyitem...

PT-2015-5564

Name of the Vulnerable Software and Affected Versions Visualware MyConnection Server version 8.2b Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via specific parameters. The...

CVE-2014-5113

Multiple cross-site scripting XSS vulnerabilities in test.php in Visualware MyConnection Server 9.7i allow remote attackers to inject arbitrary web script or HTML via the 1 testtype, 2 ver, 3 cm, 4 map, 5 lines, 6 pps, 7 bpp, 8 codec, 9 provtext, 10 provtextextra, 11 provlink, or 12 duration...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in test.php in Visualware MyConnection Server 9.7i allow remote attackers to inject arbitrary web script or HTML via the 1 testtype, 2 ver, 3 cm, 4 map, 5 lines, 6 pps, 7 bpp, 8 codec, 9 provtext, 10 provtextextra, 11 provlink, or 12 duration...