Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in IBM Lotus Foundations Start before 1.2.2c allow remote authenticated users to inject arbitrary web script or HTML via a Webconfig Users user-attribute field, as demonstrated by the 1 First Name or 2 Last Name field...

PT-2012-5608

Name of the Vulnerable Software and Affected Versions IBM Lotus Foundations Start versions prior to 1.2.2c Description The issue allows remote authenticated users to inject arbitrary web script or HTML via a Webconfig Users user-attribute field. This can be achieved by manipulating fields such as...

CVE-2012-4848: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in IBM Lotus Foundations Start before 1.2.2c allow remote authenticated users to inject arbitrary web script or HTML via a Webconfig Users user-attribute field, as demonstrated by the 1 First Name or 2 Last Name field...

CVE-2012-5323

Affected : Xavi X7968 router (webconfig/admin_passwd/passwd.html/admin_passwd). Vulnerability : Cross-site request forgery (CSRF) that allows remote attackers to hijack/alter administrator passwords by submitting requests containing sysUserName, sysPassword, and sysCfmPwd parameters. Root cause :...

PT-2012-5922

Name of the Vulnerable Software and Affected Versions Xavi X7968 affected versions not specified Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack administrator authentication for requests that change the administrator password. This is achieved via t...

PT-2012-5921

Name of the Vulnerable Software and Affected Versions Xavi X7968 affected versions not specified Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. Specifically, the vulnerabilities...

CVE-2012-5322: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Xavi X7968 allow remote attackers to inject arbitrary web script or HTML via the 1 pvcName parameter to webconfig/wan/confirm.html/confirm or 2 hostnametxtbox parameter to webconfig/lan/lanconfig.html/locallanconfig...

Xavi 7968 ADSL Router - '/webconfig/wan/confirm.html/confirm?pvcName' Cross-Site Scripting

source: https://www.securityfocus.com/bid/52098/info Xavi 7968 ADSL Router is prone to cross-site scripting, HTML-injection and cross-site request forgery vulnerabilities. The attacker can exploit the issues to execute arbitrary script code in the context of the vulnerable site, potentially...

thecus-rfi.txt

Thecus N5200Pro NAS Server Control Panel Remote File İnclude Author : CrackersChild Mail : [email protected] Bug in : usrgetform.html Exploit : www.site.com:9443/usr/usrgetform.html?name=Shelz? İnfo : http://www.thecus.com/productsover.php?cid=11&pid=8 Greetz: Str0ke...

Thecus N5200Pro NAS Server Control Panel - Remote File Inclusion

Thecus N5200Pro NAS Server Control Panel Remote File Ä°nclude Author : CrackersChild Mail : [email protected] Bug in : usrgetform.html Exploit : www.site.com:9443/usr/usrgetform.html?name=Shelz? Ä°nfo : http://www.thecus.com/productsover.php?cid=11&pid=8 Greetz: Str0ke milw0rm.com 2008-02-18...

CVE-2001-0583

Alt-N Technologies MDaemon 3.5.4 allows a remote attacker to create a denial of service via the URL request of a MS-DOS device such as GET /aux to 1 the Worldclient service at port 3000, or 2 the Webconfig service at port 3001...

CVE-2001-0583

Alt-N Technologies MDaemon 3.5.4 allows a remote attacker to create a denial of service via the URL request of a MS-DOS device such as GET /aux to 1 the Worldclient service at port 3000, or 2 the Webconfig service at port 3001...

CVE-2001-0583: Undefined Security Weakness

Alt-N Technologies MDaemon 3.5.4 allows a remote attacker to create a denial of service via the URL request of a MS-DOS device such as GET /aux to 1 the Worldclient service at port 3000, or 2 the Webconfig service at port 3001...

DoS через DOS-устройства в MDaemon

Запрос типа http://www.foo.org:3000/aux приводит к зависанию служб Worldclient Webconfig...

CVE-2001-0064

MDaemon IMAP Server DoS (CVE-2001-0064): The vulnerability affects MDaemon Webconfig/IMAP in versions up to 3.5.0 and earlier, where a remote attacker can crash the service by sending a long URL/argument terminated by a CRLF (LOGIN) string. OpenVAS/Nessus entries confirm remote DoS via long input...

CVE-2001-0064: Undefined Security Weakness

Webconfig, IMAP, and other services in MDaemon 3.5.0 and earlier allows remote attackers to cause a denial of service via a long URL terminated by a "\r\n" string...

CVE-2000-1021

CVE-2000-1021 describes a heap overflow in the WebConfig component of Mdaemon ≤ 3.1.1. The vulnerability allows remote attackers to cause a denial of service and potentially execute arbitrary commands by supplying a long URL. Exploitation details are not provided in the available documents. No re...

CVE-2000-1021: Undefined Security Weakness

Heap overflow in WebConfig in Mdaemon 3.1.1 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long URL...

CVE-1999-0844

Denial of service in MDaemon WorldClient and WebConfig services via a long URL...

CVE-1999-0844

CVE-1999-0844 maps to a DoS in MDaemon WorldClient and WebConfig services caused by an overflow when handling excessively long URLs. Nessus entries MDAEMON_WEBCONFIG.NASL and MDAEMON_WORLDCLIENT.NASL describe remote attackers sending abnormally long GET requests (e.g., GET /aaaaa[... ]aaa HTTP/1....