CVE-2013-6323

Cross-site scripting XSS vulnerability in the Administration Console in IBM WebSphere Application Server WAS 7.x before 7.0.0.33, 8.x before 8.0.0.9, and 8.5.x before 8.5.5.2, and WebSphere Virtual Enterprise 7.x before 7.0.0.5, allows remote authenticated users to inject arbitrary web script or...

CVE-2013-6323

CVE-2013-6323 is a cross-site scripting vulnerability in the Administration Console of IBM WebSphere Application Server (WAS) and WebSphere Virtual Enterprise. It can be exploited by a remote authenticated user via a crafted URL to inject script/HTML into a victim’s browser. Affected WAS versions...

CVE-2013-6323: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Administration Console in IBM WebSphere Application Server WAS 7.x before 7.0.0.33, 8.x before 8.0.0.9, and 8.5.x before 8.5.5.2, and WebSphere Virtual Enterprise 7.x before 7.0.0.5, allows remote authenticated users to inject arbitrary web script or...

Oracle Secure Global Desktop Multiple Vulnerabilities (January 2014 CPU)

The remote host has a version of Oracle Secure Global Desktop installed that is affected by multiple vulnerabilities : - Specially crafted requests sent with chunked transfer encoding could allow a remote attacker to perform a 'limited' denial of service attack on the Tomcat server. CVE-2012-3544...

CVE-2014-0419

Unspecified vulnerability in the Oracle Secure Global Desktop SGD component in Oracle Virtualization SGD before 4.63 with December 2013 PSU, 4.71, 5.0 with December 2013 PSU, and 5.10 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Secure Global Desktop SGD component in Oracle Virtualization SGD before 4.63 with December 2013 PSU, 4.71, 5.0 with December 2013 PSU, and 5.10 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to...

CVE-2014-0419

Unspecified vulnerability in the Oracle Secure Global Desktop SGD component in Oracle Virtualization SGD before 4.63 with December 2013 PSU, 4.71, 5.0 with December 2013 PSU, and 5.10 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to...

CVE-2014-0419

CVE-2014-0419 concerns the Oracle Secure Global Desktop (SGD) component in Oracle Virtualization SGD, affected in versions before 4.63 (with December 2013 PSU), 4.71, and 5.0/5.10 (with December 2013 PSU). The vulnerability is described as unspecified, enabling remote attackers to affect confiden...

CVE-2014-0419: Undefined Security Weakness

Unspecified vulnerability in the Oracle Secure Global Desktop SGD component in Oracle Virtualization SGD before 4.63 with December 2013 PSU, 4.71, 5.0 with December 2013 PSU, and 5.10 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to...

Zimbra Privilegie escalation LFI Vulnerability

Exploit for php platform in category web applications Exploit Title: Zimbra 0day exploit / Privilegie escalation via LFI Date: 06 Dec 2013 Exploit Author: rubina119 Contact Email : rubina119atgmail.com Vendor Homepage: http://www.zimbra.com/ Version: 2009, 2010, 2011, 2012 and early 2013 versions...

Zimbra 2009-2013 - Local File Inclusion

Exploit Title: Zimbra 0day exploit / Privilegie escalation via LFI Date: 06 Dec 2013 Exploit Author: rubina119 Contact Email : rubina119atgmail.com Vendor Homepage: http://www.zimbra.com/ Version: 2009, 2010, 2011, 2012 and early 2013 versions are afected, Tested on: Centosx, Ubuntu. CVE : No CVE...

Zimbra 2009-2013 - Local File Inclusion

Zimbra 2009-2013 - Local File Inclusion Exploit Title: Zimbra 0day exploit / Privilegie escalation via LFI Date: 06 Dec 2013 Exploit Author: rubina119 Contact Email : rubina119atgmail.com Vendor Homepage: http://www.zimbra.com/ Version: 2009, 2010, 2011, 2012 and early 2013 versions are afected,...

CVE-2013-5425

Cross-site scripting XSS vulnerability in the Administration Console in IBM WebSphere Virtual Enterprise 6.1 before 6.1.1.6 and 7.0 before 7.0.0.4 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

Cross site scripting

Cross-site scripting XSS vulnerability in the Administration Console in IBM WebSphere Virtual Enterprise 6.1 before 6.1.1.6 and 7.0 before 7.0.0.4 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

CVE-2013-5425

IBM WebSphere Virtual Enterprise CVE-2013-5425 is an XSS vulnerability in the Administration Console exploitable by remote authenticated users via a crafted URL. Affected versions: VE 6.1 prior to 6.1.1.6 and VE 7.0 prior to 7.0.0.4. Mitigation: apply theFix Pack/Interim Fix PM93828. For VE 7.0, ...

CVE-2013-5425: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Administration Console in IBM WebSphere Virtual Enterprise 6.1 before 6.1.1.6 and 7.0 before 7.0.0.4 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

Oracle Secure Global Desktop Administration Console Detection

Binary data oraclesecureglobaldesktophttpdetect.nbin...

CVE-2013-0566: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the 1 Accelerator JSPs, 2 Organization Administration Console JSPs, and 3 Administration Console JSPs in WebSphere Commerce Tools in IBM WebSphere Commerce 5.6.1.0 through 5.6.1.5, 6.0.0.0 through 6.0.0.11, and 7.0.0.0 through 7.0.0.7 allow...

JBoss AS Administrative Console Password Disclosure

Product: Embedded Jopr - JBoss AS Administration Console Vendor: Red Hat Middleware, LLC Version: JBoss AS Resources Datasources 2. Select Datasource 3. View page source 4. Find input type="password" 5. "value=" will contain the database password. 6. Dump database. Vendor Notified: Yes Vendor...

IBM WebSphere Application Server 7.0 < Fix Pack 27 Multiple Vulnerabilities

IBM WebSphere Application Server 7.0 before Fix Pack 27 appears to be running on the remote host. It is, therefore, potentially affected by the following vulnerabilities : - A request validation error exists related to the proxy server component that could allow a remote attacker to cause the pro...