Oracle GlassFish Server Administration Console Authentication Bypass (CVE-2011-1511)

An authentication bypass vulnerability has been reported in the administration console of Oracle GlassFish...

CVE-2012-3304

The Administrative Console in IBM WebSphere Application Server WAS 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1 allows remote attackers to hijack sessions via unspecified vectors...

Cyberoam Admin Console Detection

Cyberoam UTM's web admin console is running on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid61446; scriptversion"1.7"; scriptsetattributeattribute:"pluginmodificationdate", value:"2020/09/14"; scriptnameenglish:"Cyberoam Admin Console Detection";...

Openfire Server 3.6.0a - Admin Console Authentication Bypass (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' require 'rex/zip' class Metasploit3...

CVE-2012-2380

CVE-2012-2380 affects the Apache Roller project, specifically the admin/editor console. The issue is that HTTP POST interfaces in the Roller admin/editor console were not protected against CSRF, allowing remote attackers to hijack admin/editor authentication. Affected versions include Roller 4.0....

Openfire Admin Console Authentication Bypass

This module exploits an authentication bypass vulnerability in the administration console of Openfire servers. By using this vulnerability it is possible to upload/execute a malicious Openfire plugin on the server and execute arbitrary Java code. This module has been tested against Openfire 3.6.0...

at32 Reverse Proxy Detection

The admin console for the at32 Reverse Proxy software was detected on the remote host. at32 Reverse Proxy allows you to host several websites on a single IP or port. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid58602; scriptversion"1.5"; scriptcvsdate"Date:...

IBM WebSphere Application Server Admin Console Cross-site Scripting Vulnerability

The host is running IBM WebSphere Application Server and is prone to cross-site scripting vulnerability. OpenVAS Vulnerability Test $Id: gbibmwasadminconsolexssvuln.nasl 7044 2017-09-01 11:50:59Z teissa $ IBM WebSphere Application Server Admin Console Cross-site Scripting Vulnerability Authors:...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in ah/admin/interactive/execute aka the Interactive Console in the SDK Console aka Admin Console in the Google App Engine Python SDK before 1.5.4 allows remote attackers to hijack the authentication of administrators for requests that execute arbitrar...

CVE-2011-1364

Cross-site request forgery CSRF vulnerability in ah/admin/interactive/execute aka the Interactive Console in the SDK Console aka Admin Console in the Google App Engine Python SDK before 1.5.4 allows remote attackers to hijack the authentication of administrators for requests that execute arbitrar...

CVE-2009-2748

Cross-site scripting XSS vulnerability in the Administration Console in IBM WebSphere Application Server WAS 6.1 before 6.1.0.29 and 7.1 before 7.0.0.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Security-Assessment.com Advisory: Destination Search Admin Console Access Control Bypass

, , . .' '. ', . , '. , ., , / / / ==/ / / / / / / | Y Y / /| / /||| / / /.-. / /:wq x.0 '=.|w|.=' ='"=. presents.. Destination Search Admin Console Access Control Bypass Vendor link: http://www.localmatters.com/ PDF:...

Oracle GlassFish Server Administration Console Authentication Bypass

Oracle GlassFish Server Administration Console Authentication Bypass 1. Advisory Information Title: Oracle GlassFish Server Administration Console Authentication Bypass Advisory ID: CORE-2010-1118 Advisory URL: Date published: 2011-05-11 Date of last update: 2011-05-11 Vendors contacted: Oracle...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Administrative Console in CA Arcot WebFort Versatile Authentication Server VAS before 6.2.5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Adobe ColdFusion Cross Site Scripting

http://www.procheckup.com/vulnerabilitymanager/vulnerabilities/pr10-08 PR10-08: Various XSS and information disclosure flaws within Adobe ColdFusion administration console Vulnerability found: 17th April 2010 Vendor informed: 19th April 2010 Vulnerability fixed: 8th February 2011 Severity:...

CVE-2011-0580

Multiple cross-site scripting XSS vulnerabilities in the administrator console in Adobe ColdFusion 8.0 through 9.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Openfire Admin Console Detection

An Openfire admin console was detected on the remote host. Openfire is a collaboration server based on the XMPP Jabber protocol. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid51142; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate",...

Openfire Admin Console login.jsp XSS

The Openfire admin console running on the remote host has a cross-site scripting vulnerability. Input to the 'username' parameter of 'login.jsp' is not properly sanitized. An attacker could exploit this by tricking a user into making a specially crafted POST request, resulting in arbitrary script...

Attackers Now Using Honeypots to Trap Researchers

Attackers are constantly changing their tactics and adapting to what the security community and researchers are doing, and it’s not unusual for the bad guys to adopt techniques used by their adversaries. The latest example of this is a malware gang that has deployed what amounts to a honeypot...

Axis2 -- Cross-site scripting (XSS) vulnerability

Apache Axis2 reports: Apache Axis2 1.7.3 is a security release that contains a fix for CVE-2010-3981. That security vulnerability affects the admin console that is part of the Axis2 Web application and was originally reported for SAP BusinessObjects which includes a version of Axis2. That report...