CVE-2008-1037

CVE-2008-1037 affects Packeteer PacketShaper and PolicyCenter 8.2.2. The vulnerability is a Cross-site Scripting (XSS) in the web management interface: the FILELIST parameter to an arbitrary component in the file listing function enables remote attackers to inject arbitrary web script or HTML, wh...

packeteer-xss.txt

Packeteer Products File Listing XSS Product: Packeteer PacketShaper http://www.packeteer.com/products/packetshaper/ Packeteer PolicyCenter http://www.packeteer.com/products/packetshaper/policycenter.cfm The web management interface of several Packeteer products contains a cross-site scripting...

F5 BIG-IP Web Management Console CSRF (with example)

F5 BIG-IP Web Management Console CSRF Product: F5 BIG-IP http://www.f5.com/products/big-ip/ By design the F5 BIG-IP web management interface allows a logged-in user with Resource Manager or Administrator privileges to execute an arbitrary bigpipe shell command through the web "Console" feature. I...

f5big-xsrf.txt

F5 BIG-IP Web Management Console CSRF Product: F5 BIG-IP http://www.f5.com/products/big-ip/ By design the F5 BIG-IP web management interface allows a logged-in user with Resource Manager or Administrator privileges to execute an arbitrary bigpipe shell command through the web "Console" feature. I...

F5 BIG-IP Web Management Version Detection

Binary data 4370.prm...

F5 BIG-IP Web Management Interface Detection

An F5 BIG-IP web management interface is running on this port. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid30215; scriptversion"1.16"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/05/24"; scriptnameenglish:"F5 BIG-IP Web Management Interface...

F5 BIG-IP Web Management Interface Version

An F5 BIG-IP web management interface is running on this port, and Nessus has determined its software version. Note. HTTP credentials are required to retrieve version information. TRUSTED...

F5 BIG-IP Web Management Multiple XSS

The F5 BIG-IP web management interface on the remote host is susceptible to cross-site scripting attacks. %NASLMINLEVEL 70300 bigipwebxss.nasl Notes: - Some pages are way bigger than 8K and BIG-IP does not use Content-Length. The script uses custom httpsendrecvlength to retrieve the entire page...

Cross site scripting

Cross-site scripting XSS vulnerability in the web management login page in Tripwire Enterprise 7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-0578

CVE-2008-0578 describes a cross-site scripting (XSS) vulnerability in the web management login page of Tripwire Enterprise 7.0. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The NVD metrics assign a base score of 4.3 (Medium) with network attack...

CVE-2008-0578: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the web management login page in Tripwire Enterprise 7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

f5asm-xss.txt

F5 BIG-IP Web Management ASM Security Report XSS Product: F5 BIG-IP Application Security Manager http://www.f5.com/products/big-ip/product-modules/application-security-manager.html The F5 BIG-IP ASM web management interface contains a cross-site scripting vulnerability in the Security Report...

F5 BIG-IP Application Security Manager 9.4.3 - report_type Cross-Site Scripting

F5 BIG-IP Application Security Manager 9.4.3 - reporttype Cross-Site Scripting source: https://www.securityfocus.com/bid/27462/info F5 BIG-IP Application Security Manager is prone to a cross-site scripting vulnerability because the web management interface fails to properly sanitize user-supplied...

F5 BIG-IP Application Security Manager 9.4.3 - 'report_type' Cross-Site Scripting

source: https://www.securityfocus.com/bid/27462/info F5 BIG-IP Application Security Manager is prone to a cross-site scripting vulnerability because the web management interface fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in...

CVE-2008-0265

Multiple cross-site scripting XSS vulnerabilities in the Search function in the web management interface in F5 BIG-IP 9.4.3 allow remote attackers to inject arbitrary web script or HTML via the SearchString parameter to 1 listsystem.jsp, 2 listpktfilter.jsp, 3 listltm.jsp, 4 resourcesaudit.jsp, a...

CVE-2008-0265

Multiple cross-site scripting XSS vulnerabilities in the Search function in the web management interface in F5 BIG-IP 9.4.3 allow remote attackers to inject arbitrary web script or HTML via the SearchString parameter to 1 listsystem.jsp, 2 listpktfilter.jsp, 3 listltm.jsp, 4 resourcesaudit.jsp, a...

F5 BIG-IP Web Management List Search XSS

F5 BIG-IP Web Management List Search XSS Product: F5 BIG-IP http://www.f5.com/products/big-ip/ The F5 BIG-IP web management interface contains a cross-site scripting vulnerability in the Search function present on several list-like pages. Parameter SearchString is not sanitized before it gets...

f5-xss.txt

F5 BIG-IP Web Management List Search XSS Product: F5 BIG-IP http://www.f5.com/products/big-ip/ The F5 BIG-IP web management interface contains a cross-site scripting vulnerability in the Search function present on several list-like pages. Parameter SearchString is not sanitized before it gets...

NetScaler Unencrypted Web Management Interface

The remote Citrix NetScaler web management interface does not use TLS or SSL to encrypt connections. %NASLMINLEVEL 70300 netscalerwebunencrypted.nasl GPLv2 Changes by Tenable: - Revised plugin title 9/23/09 - Added CPE and updated copyright 10/18/2012 - Corrected encryption testing 1/2/2018 -...

NetScaler Web Management Successful Authentication

Nessus successfully logged into the remote Citrix NetScaler web management interface using the supplied credentials and stored the authentication cookie for later use. netscalerweblogin.nasl GPLv2 History: 1.00, 11/21/07 - Initial release Changes by Tenable: - Revised plugin title 9/23/09 - Added...