byRemote Surveillance v2.0 - Multiple Vulnerabilities

Document Title: =============== byRemote Surveillance v2.0 - Multiple Vulnerabilities Release Date: ============= 2011-08-07 Vulnerability Laboratory ID VL-ID: ==================================== 226 Product & Service Introduction: =============================== The byRemote Surveillance Center...

ATutor AContent 1.1 / 1.3 Cross Site Scripting

AContent 1.1 Multiple Cross-Site Scripting Vulnerabilities Vendor: ATutor Inclusive Design Institute Product web page: http://www.atutor.ca Affected version: 1.1 build r296 Summary: AContent is an open source learning content authoring system and respository used to create interoperable,...

ATutor 2.0.2 HTTP Response Splitting

ATutor 2.0.2 lang HTTP Response Splitting Vulnerability Vendor: ATutor Inclusive Design Institute Product web page: http://www.atutor.ca Affected version: 2.0.2 build r10589 Summary: ATutor is an Open Source Web-based Learning Content Management System LCMS designed with accessibility and...

ATutor 2.0.2 Cross Site Scripting / SQL Injection

ATutor 2.0.2 Multiple Remote Vulnerabilities SQLi/XSS/PD Vendor: ATutor Inclusive Design Institute Product web page: http://www.atutor.ca Affected version: 2.0.2 build r10589 Summary: ATutor is an Open Source Web-based Learning Content Management System LCMS designed with accessibility and...

ATutor AContent 1.1 SQL Injection

AContent 1.1 Multiple SQL Injection Vulnerabilities Vendor: ATutor Inclusive Design Institute Product web page: http://www.atutor.ca Affected version: 1.1 build r296 Summary: AContent is an open source learning content authoring system and respository used to create interoperable, accessible,...

acontent 1.1 - Multiple Vulnerabilities

AContent 1.1 Multiple SQL Injection Vulnerabilities Vendor: ATutor Inclusive Design Institute Product web page: http://www.atutor.ca Affected version: 1.1 build r296 Summary: AContent is an open source learning content authoring system and respository used to create interoperable, accessible,...

CVE-2011-2546

SQL injection vulnerability in the web-based management interface on Cisco SA 500 series security appliances with software before 2.1.19 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCtq65669...

CVE-2011-2547

The web-based management interface on Cisco SA 500 series security appliances with software before 2.1.19 allows remote authenticated users to execute arbitrary commands via crafted parameters to web forms, aka Bug ID CSCtq65681...

CVE-2011-2546

SQL injection vulnerability in the web-based management interface on Cisco SA 500 series security appliances with software before 2.1.19 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCtq65669...

CVE-2011-2547

The CVE-2011-2547 issue affects Cisco SA 500 Series Security Appliances running software before 2.1.19. The Privilege Escalation vulnerability allows an authenticated user to inject arbitrary commands into the underlying OS via crafted parameters in web forms, enabling execution with root-equival...

CVE-2011-2546: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the web-based management interface on Cisco SA 500 series security appliances with software before 2.1.19 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCtq65669...

CVE-2011-2547: Undefined Security Weakness

The web-based management interface on Cisco SA 500 series security appliances with software before 2.1.19 allows remote authenticated users to execute arbitrary commands via crafted parameters to web forms, aka Bug ID CSCtq65681...

Get Your New Video Codecs–and Scareware

Scareware gangs have been using pretty much the same tactics since the dawn of time. Or at least since 2005. They compromise Web sites, use them as jumping off points for pop-up boxes that aim to terrify the citizenry into thinking their PCs are infected and downloading fake security software. Bu...

dotProject GW v2.1.5 - Multiple SQL Injection Vulnerabilities

Document Title: =============== dotProject GW v2.1.5 - Multiple SQL Injection Vulnerabilities Release Date: ============= 2011-07-24 Vulnerability Laboratory ID VL-ID: ==================================== 83 Product & Service Introduction: =============================== dotProject is a PHP...

Symantec Web Gateway Detection

Symantec Web Gateway was detected on the remote host. This application protects against web-based malware and data loss. The host may be configured as a Central Intelligence Unit, which provides centralized management for multiple gateways. Note: When HTTP credentials are configured, the anti-vir...

Vulnerability in Google Picasa Could Allow Remote Code Execution

Executive Summary Microsoft is providing notification of the discovery and remediation of a vulnerability affecting Google Picasa for Windows version 3.6 build 105.61 and earlier. Microsoft discovered and disclosed the vulnerability under coordinated vulnerability disclosure to the affected vendo...

SEO Poisoning Campaign Infecting Users With Black Hole Exploit Kit

Researchers have found a new black hat SEO campaign that is being used to redirect users to links that will install the Black Hole exploit kit. The attack is based on searches for, of all things, Shia Labeouf, and leads users through a forest of redirects before plopping them on the compromised...

ManageEngine ServiceDesk Plus Detection

The remote web server hosts ManageEngine ServiceDesk Plus, a web-based help desk management application written in Java. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid55444; scriptversion"1.13"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/03/15...

ManageEngine SupportCenter Plus Detection

The remote web server hosts ManageEngine SupportCenter Plus, a web- based customer support application written in Java. %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid55447; scriptversion"1.10";...

ManageEngine Service Desk Plus 8.0 Directory Traversal Vulnerability

Exploit for jsp platform in category web applications Google Dork: ie: intitle:ManageEngine ServiceDesk Plus" Author: Keith Lee email protected Software Link: http://www.manageengine.com/products/service-desk/91677414/ManageEngineServiceDeskPlus.exe Version: 8.0 Description: Directory traversal...