Lucene search
+L

60 matches found

CNNVD
CNNVD
•added 2022/10/25 12:00 a.m.•17 views

AlgoSec FireFlow 跨站脚本漏洞

AlgoSec FireFlow is a security application from AlgoSec USA, Inc. It is used to automate the security policy change lifecycle, from submitting a change request to reviewing the changes made. A security vulnerability exists in AlgoSec FireFlow, which stems from a Reflective Cross-Site Scripting...

6.5CVSS5.9AI score0.00391EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2018/02/20 12:00 a.m.•71 views

AlgoSec Detection

Detection of AlgoSec Security Management Solution. The script sends a connection request to the server and attempts to detect AlgoSec and to extract its version. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted...

7AI score
SaveExploits0References1
NVD
NVD
•added 2014/06/16 6:55 p.m.•26 views

CVE-2014-4164

Cross-site scripting XSS vulnerability in AlgoSec FireFlow 6.3-b230 allows remote attackers to inject arbitrary web script or HTML via a user signature to SelfService/Prefs.html...

4.3CVSS5.6AI score0.00991EPSS
SaveExploits1References1
Prion
Prion
•added 2014/06/16 6:55 p.m.•25 views

Cross site scripting

Cross-site scripting XSS vulnerability in AlgoSec FireFlow 6.3-b230 allows remote attackers to inject arbitrary web script or HTML via a user signature to SelfService/Prefs.html...

4.3CVSS6.1AI score0.00991EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2014/06/16 6:00 p.m.•52 views

CVE-2014-4164

CVE-2014-4164 : Cross-site scripting (XSS) vulnerability in AlgoSec FireFlow 6.3-b230. The issue allows remote attackers to inject arbitrary web script or HTML via a user signature to SelfService/Prefs.html. The provided documents do not specify exploit details beyond the basic vulnerability desc...

4.3CVSS5.8AI score0.00991EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2014/06/16 6:00 p.m.•44 views

CVE-2014-4164

Cross-site scripting XSS vulnerability in AlgoSec FireFlow 6.3-b230 allows remote attackers to inject arbitrary web script or HTML via a user signature to SelfService/Prefs.html...

5.6AI score0.00991EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/06/16 12:00 a.m.•4 views

CVE-2014-4164: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in AlgoSec FireFlow 6.3-b230 allows remote attackers to inject arbitrary web script or HTML via a user signature to SelfService/Prefs.html...

4.3CVSS5.9AI score0.00991EPSS
SaveExploits1References2
NVD
NVD
•added 2014/01/29 6:55 p.m.•28 views

CVE-2013-7318

Cross-site scripting XSS vulnerability in BusinessFlow/login in AlgoSec Firewall Analyzer 6.4 allows remote attackers to inject arbitrary web script or HTML via the message parameter...

4.3CVSS5.7AI score0.00984EPSS
SaveExploits1References2
NVD
NVD
•added 2014/01/29 6:55 p.m.•34 views

CVE-2013-5092

Cross-site scripting XSS vulnerability in afa/php/Login.php in AlgoSec Firewall Analyzer 6.1-b86 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

4.3CVSS5.7AI score0.03247EPSS
SaveExploits2References4
Prion
Prion
•added 2014/01/29 6:55 p.m.•28 views

Cross site scripting

Cross-site scripting XSS vulnerability in afa/php/Login.php in AlgoSec Firewall Analyzer 6.1-b86 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

4.3CVSS6.1AI score0.03247EPSS
SaveExploits2References4Affected Software1
Prion
Prion
•added 2014/01/29 6:55 p.m.•27 views

Cross site scripting

Cross-site scripting XSS vulnerability in BusinessFlow/login in AlgoSec Firewall Analyzer 6.4 allows remote attackers to inject arbitrary web script or HTML via the message parameter...

4.3CVSS6.1AI score0.00984EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2014/01/29 6:00 p.m.•37 views

CVE-2013-5092

Cross-site scripting XSS vulnerability in afa/php/Login.php in AlgoSec Firewall Analyzer 6.1-b86 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

5.7AI score0.03247EPSS
SaveExploits2References4
CVE
CVE
•added 2014/01/29 6:00 p.m.•65 views

CVE-2013-5092

CVE-2013-5092 is a reported XSS vulnerability in the file afa/php/Login.php of AlgoSec Firewall Analyzer 6.1-b86 . The vulnerability allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO parameter. The NVD entry lists a Medium base score (CVSS 2.0: 4.3) with network att...

4.3CVSS5.9AI score0.03247EPSS
SaveExploits2References4Affected Software1
CVE
CVE
•added 2014/01/29 6:00 p.m.•63 views

CVE-2013-7318

AlgoSec Firewall Analyzer 6.4 has an XSS vulnerability in the BusinessFlow/login path, exploitable via the message parameter to inject arbitrary script/HTML. The root cause is an XSS condition in the login flow; remote attackers could induce script execution in a victim’s browser. The provided do...

4.3CVSS5.9AI score0.00984EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/01/29 12:00 a.m.•4 views

CVE-2013-5092: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in afa/php/Login.php in AlgoSec Firewall Analyzer 6.1-b86 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

4.3CVSS6AI score0.03247EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/01/29 12:00 a.m.•3 views

CVE-2013-7318: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in BusinessFlow/login in AlgoSec Firewall Analyzer 6.4 allows remote attackers to inject arbitrary web script or HTML via the message parameter...

4.3CVSS6AI score0.00984EPSS
SaveExploits1References2
Packet Storm
Packet Storm
•added 2013/08/21 12:00 a.m.•35 views

AlgoSec Firewall Analyzer 6.4 Cross Site Scripting

================================================================================================================================================================ AlgoSec Firewall Analyzer Version v6.4 cross-site scripting XSS Vulnerability...

0.1AI score
SaveExploits0
exploitpack
exploitpack
•added 2013/08/16 12:00 a.m.•22 views

AlgoSec Firewall Analyzer - Cross-Site Scripting

AlgoSec Firewall Analyzer - Cross-Site Scripting source: https://www.securityfocus.com/bid/61733/info AlgoSec Firewall Analyzer is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary scri...

6.8AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2013/08/16 12:00 a.m.•29 views

AlgoSec Firewall Analyzer - Cross-Site Scripting

source: https://www.securityfocus.com/bid/61733/info AlgoSec Firewall Analyzer is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in...

4.3CVSS5.2AI score0.03247EPSS
SaveExploits2
Packet Storm
Packet Storm
•added 2013/08/08 12:00 a.m.•23 views

AlgoSec Firewall Analyzer 6.1-b86 Cross Site Scripting

AlgoSec Firewall Analyzer Version v6.1-b86 cross-site scripting XSS Vulnerability ================================================================================================================================================================ AlgoSec Firewall Analyzer Version v6.1-b86 cross-site...

0.1AI score
SaveExploits0
Rows per page
Query Builder