Rittal CMC-TC Processing Unit II - Multiple Vulnerabilities

Rittal CMC-TC Processing Unit II - Multiple Vulnerabilities Louhi Networks Oy -= Security Advisory =- Advisory: Rittal CMC-TC Processing Unit II multiple vulnerabilities Release Date: 2009-03-23 Last Modified: 2009-03-22 Authors: Henri Lindberg, CISA henri d0t lindberg at louhi d0t fi Application...

Rittal CMC-TC Processing Unit II - Multiple Vulnerabilities

Louhi Networks Oy -= Security Advisory =- Advisory: Rittal CMC-TC Processing Unit II multiple vulnerabilities Release Date: 2009-03-23 Last Modified: 2009-03-22 Authors: Henri Lindberg, CISA henri d0t lindberg at louhi d0t fi Application: Rittal CMC-TC PU II Web management Devices: CMC-TC PU II D...

HP LaserJet Cross Site Request Forgery

Louhi Networks Oy -= Security Advisory =- Advisory: HP LaserJet multiple models web management CSRF vulnerability & insecure default configuration Release Date: 2009-03-17 Last Modified: 2009-03-17 Authors: Henri Lindberg, CISA henri d0t lindberg at louhi d0t fi Application: HP Embedded Web Serve...

HP Laserjet multiple models web management CSRF vulnerability & insecure default configuration

Louhi Networks Oy -= Security Advisory =- Advisory: HP LaserJet multiple models web management CSRF vulnerability & insecure default configuration Release Date: 2009-03-17 Last Modified: 2009-03-17 Authors: Henri Lindberg, CISA henri d0t lindberg at louhi d0t fi Application: HP Embedded Web Serve...

Cross site request forgery (csrf)

The web management interface in 3Com Wireless 8760 Dual Radio 11a/b/g PoE Access Point allows remote attackers to cause a denial of service device crash via a malformed HTTP POST request...

CVE-2008-6395: Use of Externally-Controlled Format String

The web management interface in 3Com Wireless 8760 Dual Radio 11a/b/g PoE Access Point allows remote attackers to cause a denial of service device crash via a malformed HTTP POST request...

Design/Logic Flaw

The web management interface in Netgear WGR614v9 allows remote attackers to cause a denial of service crash via a request that contains a question mark "?"...

CVE-2008-6122

CVE-2008-6122 affects Netgear WGR614v9: the web management interface is vulnerable to a denial-of-service triggered by a crafted HTTP request containing a question mark ("?"). The issue is remote, requires no authentication, and results in a crash (availability impact). CVSS v2 base score 7.8 (HI...

CVE-2008-6122: Improper Input Validation

The web management interface in Netgear WGR614v9 allows remote attackers to cause a denial of service crash via a request that contains a question mark "?"...

CVE-2008-5709

Multiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager CM 3.1 before 3.1.4 SP2, 4.0 before 4.0.3 SP1, and 5.0 before 5.0 SP3 allow remote authenticated users to execute arbitrary code via unknown attack vectors in the 1 Set Static Routes and 2 Backup...

CVE-2008-5710

Multiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager CM 3.1.x, 4.0.3, and 5.x allow remote attackers to read 1 configuration files, 2 log files, 3 binary image files, and 4 help files via unknown vectors...

Design/Logic Flaw

Multiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager CM 3.1 before 3.1.4 SP2, 4.0 before 4.0.3 SP1, and 5.0 before 5.0 SP3 allow remote authenticated users to execute arbitrary code via unknown attack vectors in the 1 Set Static Routes and 2 Backup...

CVE-2008-5709

CVE-2008-5709 affects Avaya Communication Manager (CM) web management interface. Affects CM versions 3.1 before 3.1.4 SP2, 4.0 before 4.0.3 SP1, and 5.0 before 5.0 SP3. Remote authenticated users can execute arbitrary code via unknown vectors in the (1) Set Static Routes and (2) Backup History co...

CVE-2008-5710

Multiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager CM 3.1.x, 4.0.3, and 5.x allow remote attackers to read 1 configuration files, 2 log files, 3 binary image files, and 4 help files via unknown vectors...

CVE-2008-5709

Multiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager CM 3.1 before 3.1.4 SP2, 4.0 before 4.0.3 SP1, and 5.0 before 5.0 SP3 allow remote authenticated users to execute arbitrary code via unknown attack vectors in the 1 Set Static Routes and 2 Backup...

CVE-2008-5709: Improper Input Validation

Multiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager CM 3.1 before 3.1.4 SP2, 4.0 before 4.0.3 SP1, and 5.0 before 5.0 SP3 allow remote authenticated users to execute arbitrary code via unknown attack vectors in the 1 Set Static Routes and 2 Backup...

CVE-2008-5710: Undefined Security Weakness

Multiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager CM 3.1.x, 4.0.3, and 5.x allow remote attackers to read 1 configuration files, 2 log files, 3 binary image files, and 4 help files via unknown vectors...

phpMyAdmin table参数SQL注入漏洞

BUGTRAQ ID: 32720 phpMyAdmin是用PHP编写的工具，用于通过WEB管理MySQL。 phpMyAdmin的./phpmyadmin/libraries/dbtableexists.lib.php文件中没有正确地过滤table参数： $result = PMADBItryquery 'SELECT COUNT FROM ' . PMAsqlAddslashes$table, true . ';', null, PMADBIQUERYSTORE;...

WebLogic simple catch the chicken law-vulnerability and early warning-the black bar safety net

This article has been published in the hacker X-Files for 2 0 0 8 year 1 1 issue of the magazine on After the author published on the blog, such as reproduced please retain this information! Tomcat is estimated to many people to bring a N meaty chicken server, directly scan weak passwords, into t...

Packeteer/Bluecoat Web Management Interface Detection (HTTP)

HTTP based detection of the Packeteer Web Management Interface. SPDX-FileCopyrightText: 2008 nnposter Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...