CVE-2014-8072

CVE-2014-8072 affects OpenMRS 2.1 Standalone Edition, where the administration module allows remote authenticated users to obtain read access through a direct request to /admin. The available sources confirm the vulnerability details but do not provide exploit steps, affected product variants bey...

CVE-2014-8072: Undefined Security Weakness

The administration module in OpenMRS 2.1 Standalone Edition allows remote authenticated users to obtain read access via a direct request to /admin...

PT-2014-8396

Name of the Vulnerable Software and Affected Versions OpenMRS version 2.1 Standalone Edition Description The administration module in OpenMRS allows remote authenticated users to obtain read access via a direct request to "/admin". Recommendations For OpenMRS version 2.1 Standalone Edition,...

CVE-2013-7077

Cross-site scripting XSS vulnerability in the Backend User Administration Module in TYPO3 6.0.x before 6.0.12 and 6.1.x before 6.1.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2013-6260

Name of the Vulnerable Software and Affected Versions TYPO3 versions 6.0.x through 6.0.11 TYPO3 versions 6.1.x through 6.1.6 Description A cross-site scripting XSS issue exists in the Backend User Administration Module, allowing remote attackers to inject arbitrary web script or HTML...

CVE-2013-7077: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Backend User Administration Module in TYPO3 6.0.x before 6.0.12 and 6.1.x before 6.1.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

FortiMail Messaging Security Appliance crossite scripting

Crossite scripting in web administration module...

CVE-2006-4727

Cross-site scripting XSS vulnerability in emfadmin/statusView.do in Tumbleweed EMF Administration Module 6.2.2 Build 4123, and possibly other versions before 6.3.2, allows remote attackers to inject arbitrary web script or HTML via the 1 lineId and 2 sort parameters...

CVE-2006-4727

CVE-2006-4727 describes an XSS vulnerability in Tumbleweed EMF Administration Module 6.2.2 Build 4123, and possibly earlier versions before 6.3.2. The flaw allows remote attackers to inject arbitrary web script or HTML via the lineId and sort parameters in emfadmin/statusView.do. Impact is that a...

CVE-2006-4727: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in emfadmin/statusView.do in Tumbleweed EMF Administration Module 6.2.2 Build 4123, and possibly other versions before 6.3.2, allows remote attackers to inject arbitrary web script or HTML via the 1 lineId and 2 sort parameters...

CVE-2006-4727

Cross-site scripting XSS vulnerability in emfadmin/statusView.do in Tumbleweed EMF Administration Module 6.2.2 Build 4123, and possibly other versions before 6.3.2, allows remote attackers to inject arbitrary web script or HTML via the 1 lineId and 2 sort parameters...

WORK System E-Commerce 3.0.1 - Remote File Inclusion

WORK System E-Commerce 3.0.1 - Remote File Inclusion ============================================================================================ WORK System E-Commerce ginclude Remote File Inclusion Vulnerability...

nexusway.txt

Product : Neteyes Nexusway http://www.neteyes.com.tw Description: Neteyes Nexusway multiple vulnerability Severity: Very High Description =========== The NexusWay is a Multiservice Border Gateway that provides the Multiaccess and Multiservice capabilities in the border segment of an enterprise...

Oracle 9i Application Server 9.0.2 Web Cache Administration Tool - Denial of Service

source: https://www.securityfocus.com/bid/5902/info Oracle 9i Application Server 9iAS allows remote administration via a web access module. This vulnerability affects Oracle 9iAS running on Microsoft Windows. When a custom request is sent to the Web Administration module, the module may react...

CVE-2000-0812: Undefined Security Weakness

The administration module in Sun Java web server allows remote attackers to execute arbitrary commands by uploading Java code to the module and invoke the com.sun.server.http.pagecompile.jsp92.JspServlet by requesting a URL that begins with a /servlet/ tag...