7587 matches found
CVE-2012-1674
Unspecified vulnerability in the Siebel Clinical component in Oracle Industry Applications 7.7, 7.8, 8.0.0.x, 8.1.1.x, and 8.2.2.x allows remote authenticated users to affect integrity via unknown vectors related to Web UI, a different vulnerability than CVE-2012-0582...
CVE-2012-1674: Undefined Security Weakness
Unspecified vulnerability in the Siebel Clinical component in Oracle Industry Applications 7.7, 7.8, 8.0.0.x, 8.1.1.x, and 8.2.2.x allows remote authenticated users to affect integrity via unknown vectors related to Web UI, a different vulnerability than CVE-2012-0582...
PT-2012-3434
Name of the Vulnerable Software and Affected Versions Oracle Industry Applications versions 7.7 through 8.2.2.x Description The issue affects the integrity of the system, allowing remote authenticated users to exploit it via unknown vectors related to the Web UI. Recommendations For Oracle Indust...
CVE-2012-0582: Undefined Security Weakness
Unspecified vulnerability in the Siebel Clinical component in Oracle Industry Applications 7.7, 7.8, 8.0.0.x, 8.1.1.x, and 8.2.2.x allows remote authenticated users to affect integrity via unknown vectors related to Web UI, a different vulnerability than CVE-2012-1674...
PT-2012-2690
Name of the Vulnerable Software and Affected Versions Oracle Industry Applications versions 7.7 through 8.2.2.x Description The issue affects the integrity of the system, allowing remote authenticated users to exploit it via unknown vectors related to the Web UI. Recommendations For versions 7.7...
Metasploit 4.1.0 Web UI stored XSS vulnerability
Advisory: Metasploit 4.1.0 Web UI stored XSS vulnerability Advisory ID: SSCHADV2011-033 Author: Stefan Schurtz Affected Software: Successfully tested on Metasploit Community Edition Vendor URL: http://metasploit.com/ Vendor Status: fixed EDB-ID: 18012 ========================== Vulnerability...
Metasploit 4.1.0 Web UI Cross Site Scripting vulnerability
Metasploit 4.1.0 Web UI Cross Site Scripting vulnerability The Web UI in Metasploit version 4.1.0 suffers from a stored cross site scripting vulnerability discovered by "Stefan Schurtz ". Technical Details Login to Web UI - Create New Project - Project name - '"alertdocument.cookie...
Metasploit 4.1.0 Web UI Cross Site Scripting vulnerability
Metasploit 4.1.0 Web UI Cross Site Scripting vulnerability The Web UI in Metasploit version 4.1.0 suffers from a stored cross site scripting vulnerability discovered by "Stefan Schurtz". Technical Details Login to Web UI - Create New Project - Project name -...
Metasploit 4.1.0 Web UI - Persistent Cross-Site Scripting
Metasploit 4.1.0 Web UI - Persistent Cross-Site Scripting Advisory: Metasploit 4.1.0 Web UI stored XSS vulnerability Advisory ID: SSCHADV2011-033 Author: Stefan Schurtz Affected Software: Successfully tested on Metasploit Community Edition Vendor URL: http://metasploit.com/ Vendor Status: informe...
Metasploit 4.1.0 Web UI Cross Site Scripting
Advisory: Metasploit 4.1.0 Web UI stored XSS vulnerability Advisory ID: SSCHADV2011-033 Author: Stefan Schurtz Affected Software: Successfully tested on Metasploit Community Edition Vendor URL: http://metasploit.com/ Vendor Status: informed ========================== Vulnerability Description:...
Metasploit Web UI 4.1.0 - Persistent Cross-Site Scripting
Advisory: Metasploit 4.1.0 Web UI stored XSS vulnerability Advisory ID: SSCHADV2011-033 Author: Stefan Schurtz Affected Software: Successfully tested on Metasploit Community Edition Vendor URL: http://metasploit.com/ Vendor Status: informed ========================== Vulnerability Description:...
Metasploit 4.1.0 Web UI stored XSS Vulnerability
Exploit for multiple platform in category web applications Advisory: Metasploit 4.1.0 Web UI stored XSS vulnerability Advisory ID: SSCHADV2011-033 Author: Stefan Schurtz Affected Software: Successfully tested on Metasploit Community Edition Vendor URL: http://metasploit.com/ Vendor Status: inform...
CVE-2011-1357
Technical details about CVE-2011-1357 are not publicly available in the provided connected documents. Monitor for updates from official advisories.
When you open the nworks Web UI in a browser, you see a blank screen.
When you open the nworks Web UI in a browser, you see a blank screen instead of the logon screen/management screen. You may also see a Java exception stating that you need to add the site to the Trusted Sites zone...
CVE-2011-2606
Cross-site scripting XSS vulnerability in the Web UI in IBM Rational Team Concert RTC 3.0 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Work Item 165511...
CVE-2011-2606
Cross-site scripting XSS vulnerability in the Web UI in IBM Rational Team Concert RTC 3.0 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Work Item 165511...
CVE-2011-2606
IBM Rational Team Concert (RTC) 3.0 Web UI is affected by CVE-2011-2606, a Cross-site Scripting (XSS) flaw in the Web UI exploitable via an unspecified parameter (Work Item 165511). Root cause: unsafe handling of input in the affected page. Impact: remote attacker can inject arbitrary web script ...
PT-2011-3955
Name of the Vulnerable Software and Affected Versions IBM Rational Team Concert RTC version 3.0 Description A cross-site scripting XSS issue exists in the Web UI, allowing remote attackers to inject arbitrary web script or HTML via an unspecified parameter. Recommendations For IBM Rational Team...
CVE-2011-2606: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Web UI in IBM Rational Team Concert RTC 3.0 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Work Item 165511...