Fortigate Firewall 2.x - dlg Admin Interface Cross-Site Scripting

Fortigate Firewall 2.x - dlg Admin Interface Cross-Site Scripting source: https://www.securityfocus.com/bid/9033/info Multiple cross-site scripting vulnerabilities have been reported in the FortiGate Firewall web administrative interface. These issues could be exploited by enticing an...

Fortigate Firewall 2.x - listdel Admin Interface Cross-Site Scripting

Fortigate Firewall 2.x - listdel Admin Interface Cross-Site Scripting source: https://www.securityfocus.com/bid/9033/info Multiple cross-site scripting vulnerabilities have been reported in the FortiGate Firewall web administrative interface. These issues could be exploited by enticing an...

Fortigate Firewall 2.x - selector Admin Interface Cross-Site Scripting

Fortigate Firewall 2.x - selector Admin Interface Cross-Site Scripting source: https://www.securityfocus.com/bid/9033/info Multiple cross-site scripting vulnerabilities have been reported in the FortiGate Firewall web administrative interface. These issues could be exploited by enticing an...

Fortigate Firewall 2.x - listdel Admin Interface Cross-Site Scripting

source: https://www.securityfocus.com/bid/9033/info Multiple cross-site scripting vulnerabilities have been reported in the FortiGate Firewall web administrative interface. These issues could be exploited by enticing an administrative user to follow a malicious link that includes hostile HTML and...

Fortigate Firewall 2.x - Policy Admin Interface Cross-Site Scripting

source: https://www.securityfocus.com/bid/9033/info Multiple cross-site scripting vulnerabilities have been reported in the FortiGate Firewall web administrative interface. These issues could be exploited by enticing an administrative user to follow a malicious link that includes hostile HTML and...

Fortigate Firewall 2.x - selector Admin Interface Cross-Site Scripting

source: https://www.securityfocus.com/bid/9033/info Multiple cross-site scripting vulnerabilities have been reported in the FortiGate Firewall web administrative interface. These issues could be exploited by enticing an administrative user to follow a malicious link that includes hostile HTML and...

Fortigate Firewall 2.x - dlg Admin Interface Cross-Site Scripting

source: https://www.securityfocus.com/bid/9033/info Multiple cross-site scripting vulnerabilities have been reported in the FortiGate Firewall web administrative interface. These issues could be exploited by enticing an administrative user to follow a malicious link that includes hostile HTML and...

FloosieTek FTGatePro 1.22 - Mail Server Full Path Disclosure

source: https://www.securityfocus.com/bid/8527/info FloosieTek FTGatePro Mail Server may disclose its installation path to remote attackers. This information could be useful when mounting further attacks against the system. This issue exists in the web administrative interface, which listens on...

FloosieTek FTGatePro 1.22 - Mail Server Cross-Site Scripting

source: https://www.securityfocus.com/bid/8528/info FloosieTek FTGatePro Mail Server is prone to a cross-site scripting vulnerability. A remote attacker could exploit this issue by enticing a legitimate user of the mail server to follow a malicious link with embedded HTML and script code. The...

3Com DSL Router 812 1.1.71.1.92.0 - Administrative Interface Long Request Denial of Service

3Com DSL Router 812 1.1.71.1.92.0 - Administrative Interface Long Request Denial of Service // source: https://www.securityfocus.com/bid/8248/info A problem in the 3Com 812 OfficeConnect has been reported that may result in the router becoming unstable. Because of this, an attacker may be able to...

3Com DSL Router 812 1.1.7/1.1.9/2.0 - Administrative Interface Long Request Denial of Service

// source: https://www.securityfocus.com/bid/8248/info A problem in the 3Com 812 OfficeConnect has been reported that may result in the router becoming unstable. Because of this, an attacker may be able to deny service to legitimate users of the vulnerable router by submitting an excessively long...

Zeus Web Server 4.x - Admin Interface 'VS_Diag.cgi' Cross-Site Scripting

source: https://www.securityfocus.com/bid/7751/info The Zeus Web Server contains a web based administration interface that is vulnerable to cross site scripting attacks. Due to insufficient sanitization of user-supplied input, it is possible for an attacker to construct a malicious link which...

iisPROTECT Unpassworded Administrative Interface

The remote host is running iisprotect, an IIS add-on to protect the pages served by this server. However, the administration module of this interface has not been password protected. As a result, an attacker may perform administrative tasks without any authentication. %NASLMINLEVEL 70300 C Tenabl...

iisPROTECT Admin Interface SiteAdmin.ASP GroupName Parameter SQL Injection

The remote host is running iisPROTECT, an IIS add-on to protect the pages served by this server. There is a bug in the remote version of iisPROTECT that may allow an attacker with the ability to browse the administrative interface to execute arbitrary commands through SQL injection on this host...

Axis Network Camera 2.x - HTTP Authentication Bypass

source: https://www.securityfocus.com/bid/7652/info A vulnerability has been discovered in various Axis Communications products. By making a request for a specially formatted URL, it may be possible for remote users to access the administrative configuration interface without being prompted for...

CVE-2002-1440

The Gateway GS-400 server has a default root password of "0001n" that can not be changed via the administrative interface, which can allow attackers to gain root privileges...

Zeus Web Server 4.04.1 - Admin Interface Cross-Site Scripting

Zeus Web Server 4.04.1 - Admin Interface Cross-Site Scripting source: https://www.securityfocus.com/bid/6144/info The Zeus Web Server contains a web based administration interface that is vulnerable to cross site scripting attacks. Due to insufficient sanitization of user-supplied input it is...

HP Procurve 4000M Stacked Switch HTTP Reset Vulnerability

Techserve, Inc. www.tech-serve.com Security Advisory Advisory Name: HP Procurve 4000M Stacked Switch HTTP Reset Vulnerability Release Date: 09/23/2002 Platform: HP Procurve 4000M Switch J4121A Application: Firmware revision C.09.13 Current Severity: Multiple reset requests may deny use of stacked...

Cisco Content Service Switch unauthorized access

It's possible to access administrative interface without authentication...

Sun AnswerBook2 1.x - Unauthorized Administrative Script Access

source: https://www.securityfocus.com/bid/5383/info Sun Microsystems AnswerBook2 allows users to view Sun documentation through a web browser, and is available for Solaris. AnswerBook2 includes an administrative web interface. Reportedly, it is possible to access these scripts without...