483 matches found
WebGUI < 7.3.8 www_purgeList Method Asset Deletion
Binary data 3897.prm...
[SA23754] WebGUI User Name Script Insertion Vulnerability
TITLE: WebGUI User Name Script Insertion Vulnerability SECUNIA ADVISORY ID: SA23754 VERIFY ADVISORY: http://secunia.com/advisories/23754/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: WebGUI 7.x http://secunia.com/product/13252/ DESCRIPTION: A vulnerabili...
CVE-2007-0407
Cross-site scripting XSS vulnerability in Operation/User.pm in Plain Black WebGUI before 7.3.5 beta allows remote attackers to inject arbitrary web script or HTML via the username parameter during anonymous registration, a different vector than CVE-2007-0308. NOTE: it is possible that a separate...
Cross site scripting
Cross-site scripting XSS vulnerability in Operation/User.pm in Plain Black WebGUI before 7.3.5 beta allows remote attackers to inject arbitrary web script or HTML via the username parameter during anonymous registration, a different vector than CVE-2007-0308. NOTE: it is possible that a separate...
CVE-2007-0407
CVE-2007-0407 describes a cross-site scripting (XSS) vulnerability in Plain Black WebGUI, specifically in Operation/User.pm for versions before 7.3.5 (beta). The issue arises from accepting a username during anonymous registration, allowing an attacker to inject arbitrary web script or HTML. The ...
CVE-2007-0407
Cross-site scripting XSS vulnerability in Operation/User.pm in Plain Black WebGUI before 7.3.5 beta allows remote attackers to inject arbitrary web script or HTML via the username parameter during anonymous registration, a different vector than CVE-2007-0308. NOTE: it is possible that a separate...
Cross site scripting
Cross-site scripting XSS vulnerability in Plain Black WebGUI before 7.3.4 beta allows remote attackers to inject arbitrary web script or HTML via Wiki Page titles...
CVE-2007-0308
Cross-site scripting XSS vulnerability in Plain Black WebGUI before 7.3.4 beta allows remote attackers to inject arbitrary web script or HTML via Wiki Page titles...
CVE-2007-0308
Cross-site scripting XSS vulnerability in Plain Black WebGUI before 7.3.4 beta allows remote attackers to inject arbitrary web script or HTML via Wiki Page titles...
CVE-2007-0308
Plain Black WebGUI is affected by CVE-2007-0308: an XSS in Wiki Page titles allows remote injection of script/HTML. Affected product/version: Plain Black WebGUI before 7.3.4 (beta). Root cause: improper handling of Wiki Page titles leads to script injection. Impact per sources: client-side script...
WebGUI < 6.7.6 arbitrary command execution
The remote web server contains a CGI script that is prone to arbitrary code execution. Description : The remote host is running WebGUI, a content management system from Plain Black Software. The installed version of WebGUI on the remote host fails to sanitize user-supplied input via the OpenVAS...
WebGUI < 6.7.6 arbitrary command execution
The installed version of WebGUI on the remote host fails to sanitize user-supplied input via the SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
CVE-2006-0680
Unspecified vulnerability in WebGUI before 6.8.6-gamma allows remote attackers to create an account, when anonymous registration is disabled, via a certain URL...
Design/Logic Flaw
Unspecified vulnerability in WebGUI before 6.8.6-gamma allows remote attackers to create an account, when anonymous registration is disabled, via a certain URL...
CVE-2006-0680
CVE-2006-0680 affects WebGUI prior to version 6.8.6-gamma, allowing remote attackers to create an account via a specific URL when anonymous registration is disabled. The provided documents confirm the affected software and the vulnerability condition; no explicit fix/version is stated within the ...
CVE-2006-0680
Unspecified vulnerability in WebGUI before 6.8.6-gamma allows remote attackers to create an account, when anonymous registration is disabled, via a certain URL...
WebGUI < 6.8.6 'Anonymous' Account Creation
Binary data 3427.prm...
[SA18819] WebGUI User Account Creation Vulnerability
TITLE: WebGUI User Account Creation Vulnerability SECUNIA ADVISORY ID: SA18819 VERIFY ADVISORY: http://secunia.com/advisories/18819/ CRITICAL: Moderately critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: WebGUI 6.x http://secunia.com/product/4293/ DESCRIPTION: A vulnerability has been...