2292 matches found
KENT-WEB ACCESS REPORT vulnerable to cross-site scripting
Overview ACCESS REPORT provided by KENT-WEB contains a cross-site scripting vulnerability. ACCESS REPORT provided by KENT-WEB is a software to analyze web access logs. ACCESS REPORT contains a cross-site scripting vulnerability. This is caused by a particular method in which tags are embedded int...
JVN#23563149: KENT-WEB ACCESS REPORT vulnerable to cross-site scripting
ACCESS REPORT provided by KENT-WEB is a software to analyze web access logs. ACCESS REPORT contains a cross-site scripting vulnerability. This is caused by a particular method in which tags are embedded into the web page. Note that this vulnerability is different from JVN68830017. Impact An...
Oracle OpenSSO 8.0 Multiple XSS POST Injection Vulnerabilities
Exploit for multiple platform in category web applications Oracle OpenSSO 8.0 Multiple XSS POST Injection Vulnerabilities alert1;' / alert2;' / input type="hidden" n...
Oracle OpenSSO 8.0 - Multiple Cross-Site Scripting POST Injection Vulnerabilities
Oracle OpenSSO 8.0 - Multiple Cross-Site Scripting POST Injection Vulnerabilities Oracle OpenSSO 8.0 Multiple XSS POST Injection Vulnerabilities alert1;' / alert2;' / alert3;' /...
Oracle OpenSSO 8.0 Multiple XSS POST Injection Vulnerabilities
Summary Oracle OpenSSO is a complete solution that provides Web access management, federated single sign-on and Web services security in a single, self-contained application. Description Oracle OpenSSO suffers from multiple cross-site scripting vulnerabilities when input passed via several...
BigPond 3G21WB - Multiple Vulnerabilities
BigPond 3G21WB - Multiple Vulnerabilities Hard-coded credentials and command-injection vulnerabilities on BigPond 3G21WB ============================================================================== ADVISORY INFORMATION Title: Hard-coded credentials and command-injection vulnerabilities on BigPo...
CVE-2012-2289
EMC ApplicationXtender products are affected by CVE-2012-2289. The vulnerability exists in EMC ApplicationXtender Desktop before 6.5 SP2 and ApplicationXtender Web Access .NET before 6.5 SP2, enabling remote file uploads to arbitrary locations and potentially arbitrary code execution via unspecif...
IBM Lotus iNotes Upload模块ActiveX控件缓冲区溢出漏洞
BUGTRAQ ID: 53879 CVE ID: CVE-2012-2175 Lotus iNotes之前被称为Lotus Domino Web Access，是Lotus Domino服务器基于web的消息和协作界面。 IBM Lotus iNotes 8.5.3 FP2之前版本dwa85W.dll内的某些ActiveX控件中的AttachmentTimes方法在实现上存在缓冲区溢出漏洞，通过较长的参数可允许远程攻击者执行任意代码。 0 IBM Lotus iNotes 厂商补丁： IBM --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
New VPN Hunter Service Scans Domains For Remote-Access Systems
If there’s one thing attackers love, it’s readily accessible remote-connection services running on a target company’s network. Once an attacker knows that an organization is running a specific kind of VPN or has RDP enabled on a bunch of machines, he can then start looking for known vulnerabiliti...
2012 Most Vulnerable Cities At Risk Of Cyber Crime
2012 Most Vulnerable Cities At Risk Of Cyber Crime Norton's study showed the city was one of the ten worst for hacking. Each city was ranked by the prevalence of PCs and smartphones in addition to social media use with risk factors like unsecured Wi-Fi hotspots and malware attempts. Manchester wa...
FreePBX Credential Disclosure
Have freePBX running on a public IP, and don’t have the latest version? It may be vulnerable. If you have an asterisk phone server running on a public IP, using the freePBX web GUI, and don’t have one of the latest releases it may be vulnerable. Its very common to have freePBX on an Internet rout...
Microsoft Outlook Web Access会话重放安全限制绕过漏洞
BUGTRAQ ID: 50361 Outlook Web Access可使用户访问在会话环境中查看通信，而不仅仅是分散的邮件，从而帮助他们处理每天收到的大量邮件。 Microsoft Outlook Web Access在实现上存在安全限制绕过漏洞，远程攻击者可利用此漏洞劫持Web会话或通过重放攻击绕过身份验证，并获取受害者的电子邮件帐户。 SideJacking是窃取Web cookie，然后重放以克隆另一用户的Web会话的过程，使用克隆的Web会话，攻击者可利用受害者之前建立的站点访问。这可使读取网络报文的攻击者窃取所有提交给服务器的数据或客户端查看的网页。 Microsoft...
Cross site scripting
Cross-site scripting XSS vulnerability in Cyber-Ark Password Vault Web Access PVWA 5.0 and earlier, 5.5 through 5.5 patch 4, and 6.0 through 6.0 patch 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2011-0459
CVE-2011-0459 : Cross-site scripting (XSS) in Cyber-Ark Password Vault Web Access (PVWA) affects PVWA v5.0 and earlier, v5.5–v5.5 patch 4, and v6.0–v6.0 patch 2. The vulnerability allows remote attackers to inject arbitrary web script/HTML via unspecified vectors, potentially executing in the bro...
[SECURITY] Fedora 15 Update: zabbix-1.8.6-1.fc15
ZABBIX is software that monitors numerous parameters of a network and the health and integrity of servers. ZABBIX uses a flexible notification mechanism that allows users to configure e-mail based alerts for virtually any event. This allows a fast reaction to server problems. ZABBIX offers...
CVE-2011-1263
Cross-site scripting XSS vulnerability in the logon page in Remote Desktop Web Access RD Web Access in Microsoft Windows Server 2008 R2 and R2 SP1 allows remote attackers to inject arbitrary web script or HTML via the URI, aka "Remote Desktop Web Access Vulnerability."...
Cross site scripting
Cross-site scripting XSS vulnerability in the logon page in Remote Desktop Web Access RD Web Access in Microsoft Windows Server 2008 R2 and R2 SP1 allows remote attackers to inject arbitrary web script or HTML via the URI, aka "Remote Desktop Web Access Vulnerability."...
CVE-2011-1263
The CVE describes a cross-site scripting (XSS) vulnerability in the logon page of Remote Desktop Web Access (RD Web Access) on Microsoft Windows Server 2008 R2 and R2 SP1. The issue arises from insufficient input sanitization in the login URI, allowing remote attackers to inject arbitrary HTML/ J...
CVE-2011-1263
Cross-site scripting XSS vulnerability in the logon page in Remote Desktop Web Access RD Web Access in Microsoft Windows Server 2008 R2 and R2 SP1 allows remote attackers to inject arbitrary web script or HTML via the URI, aka "Remote Desktop Web Access Vulnerability."...
