OSSIM Web Frontend Default Credentials

It is possible to log into the remote OSSIM web frontend by providing the default credentials. A remote attacker could exploit this to gain administrative control of the OSSIM web frontend. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc';...

FreeBSD : ganglia-webfrontend -- XSS vulnerabilities (fee7e059-acec-11dc-807f-001b246e4fdf)

The Ganglia project reports : The Ganglia development team is pleased to release Ganglia 3.0.6 Foss which is available.... This release includes a security fix for web frontend cross-scripting vulnerability. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

ganglia-webfrontend -- XSS vulnerabilities

The Ganglia project reports: The Ganglia development team is pleased to release Ganglia 3.0.6 Foss which is available.... This release includes a security fix for web frontend cross-scripting vulnerability...

GLSA-200606-06 : AWStats: Remote execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200606-06 AWStats: Remote execution of arbitrary code Hendrik Weimer has found that if updating the statistics via the web frontend is enabled, it is possible to inject arbitrary code via a pipe character in the 'migrate' paramete...

AWStats: Remote execution of arbitrary code

Background AWStats is an advanced log file analyzer and statistics generator. Description Hendrik Weimer has found that if updating the statistics via the web frontend is enabled, it is possible to inject arbitrary code via a pipe character in the "migrate" parameter. Additionally, r0t has...

CVE-2005-2029

amaroK Web Frontend 1.3 stores the globals.inc file under the web root without a .php extension and insufficient access control, which allows remote attackers to obtain the database username and password via a direct request to the file...

CVE-2005-2029

The CVE-2005-2029 entry concerns amaroK Web Frontend 1.3. It describes that the globals.inc file is stored under the web root without a .php extension and with insufficient access control, enabling remote attackers to retrieve the database username and password via a direct request to the file. T...