Security Bulletin: Vulnerability in Apache Struts library affect Tivoli Netcool/OMNIbus WebGUI (CVE-2024-53677)

Summary Apache Struts is used by Tivoli Netcool/OMNIbus WebGUI WebGUI as part of its web client component. Vulnerability Details CVEID:CVE-2024-53677 DESCRIPTION: File upload logic in Apache Struts is flawed. An attacker can manipulate file upload params to enable paths traversal and under some...

Command Injection

billz/raspap-webgui is vulnerable to remote code execution. An attacker is able to exploit the vulnerability by injecting malicious code via the POST request...

CVE-2020-14721

Vulnerability in the Oracle Enterprise Communications Broker product of Oracle Communications Applications component: WebGUI. Supported versions that are affected are 3.0.0-3.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

Unspecified Vulnerability in Oracle Enterprise Communications Broker (CNVD-2020-54680)

Oracle Enterprise Communications Broker is a core session manager designed to simplify complex multi-vendor VoIP and unified communications UC networks. A security vulnerability exists in the WebGUI component in Oracle Enterprise Communications Broker 3.0.0-3.2.0. An attacker could exploit the...

WebGUI < 7.4.35 Data Form List View Unspecified Vulnerability

Binary data 4489.prm...

CVE-2007-6487

Unspecified vulnerability in Plain Black WebGUI 7.4.0 through 7.4.17 allows remote authenticated users with Secondary Admin privileges to create Admin accounts, a different vulnerability than CVE-2006-0680...

WebGUI < 6.8.6 'Anonymous' Account Creation

Binary data 3427.prm...

WebGUI < 6.7.6 Unspecified Code Execution

Binary data 3253.prm...

WebGUI user profile Unspecified Vulnerability

The remote host is running WebGUI, a content management system from Plain Black Software. According to its banner, the version of this software on the remote is earlier than 6.2.9 and thus affected by an undisclosed remote vulnerability related to the 'user profile' feature. %NASLMINLEVEL 70300 C...

WebGUI < 6.2.9 Unspecified Vulnerability

Binary data 2414.prm...

WebGUI < 5.2.4 Crafted HTTP Request DoS

Binary data 1596.prm...

Nokia IPSO Voyager WebGUI readfile.tcl file Parameter Arbitrary File Access

The remote host includes a CGI /cgi-bin/readfile.tcl which allows anyone to read arbitrary files on the remote host with the privileges of the HTTP daemon typically 'nobody'. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Ref: From: Jonas Eriksson mailto:[email protected] Date: 23/04/2003 To:...