3793 matches found
CVE-2007-3986
file.cgi in Secure Computing SecurityReporter aka Network Security Analyzer 4.6.3 allows remote attackers to bypass authentication via a name parameter that specifies the eventcache directory and a non-GIF file, which causes the $dontvalidate variable to be set to true. NOTE: a separate traversal...
[Full-disclosure] Secure Computing - Security Reporter Auth Bypass and Directory Traversal Vulnerability
SECURITYREPORTER - AUTHENTICATION BYPASS AND DIRECTORY TRAVERSAL VULNERABILITY Product: SecurityReporter Version: 4.6.3 Build Date: 04/20/2007 Platform: Win32 Vendor: Secure Computing www.securecomputing.com Product Description ------------------- "SecurityReporter is a security event analysis an...
[SECURITY] Fedora 7 Update: wireshark-0.99.6-1.fc7
Wireshark is a network traffic analyzer for Unix-ish operating systems. This package lays base for libpcap, a packet capture and filtering library, contains command-line utilities, contains plugins and documentation for wireshark. A graphical user interface is packaged separately to GTK+ package...
[SECURITY] Fedora Core 6 Update: wireshark-0.99.6-1.fc6
Wireshark is a network traffic analyzer for Unix-ish operating systems. This package lays base for libpcap, a packet capture and filtering library, contains command-line utilities, contains plugins and documentation for wireshark. A graphical user interface is packaged separately to GTK+ package...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in ManageEngine NetFlow Analyzer 5 allow remote attackers to inject arbitrary web script or HTML via the 1 alpha parameter in a netflow/jspui/applicationList.jsp, the 2 task parameter in b netflow/jspui/appConfig.jsp, the 3 view parameter in c...
CVE-2007-3593
Multiple cross-site scripting XSS vulnerabilities in ManageEngine NetFlow Analyzer 5 allow remote attackers to inject arbitrary web script or HTML via the 1 alpha parameter in a netflow/jspui/applicationList.jsp, the 2 task parameter in b netflow/jspui/appConfig.jsp, the 3 view parameter in c...
CVE-2007-3593
Multiple cross-site scripting XSS vulnerabilities in ManageEngine NetFlow Analyzer 5 allow remote attackers to inject arbitrary web script or HTML via the 1 alpha parameter in a netflow/jspui/applicationList.jsp, the 2 task parameter in b netflow/jspui/appConfig.jsp, the 3 view parameter in c...
CVE-2007-3593
CVE-2007-3593 involves multiple cross-site scripting (XSS) vulnerabilities in ManageEngine NetFlow Analyzer 5 . The flaws allow remote attackers to inject arbitrary web script or HTML through parameters in several JSP pages: (1) alpha in netflow/jspui/applicationList.jsp, (2) task in netflow/jspu...
CVE-2007-3593: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in ManageEngine NetFlow Analyzer 5 allow remote attackers to inject arbitrary web script or HTML via the 1 alpha parameter in a netflow/jspui/applicationList.jsp, the 2 task parameter in b netflow/jspui/appConfig.jsp, the 3 view parameter in c...
NetFlow Analyzer 5 - netflowjspuiindex.jsp?view Cross-Site Scripting
NetFlow Analyzer 5 - netflowjspuiindex.jsp?view Cross-Site Scripting source: https://www.securityfocus.com/bid/24766/info NetFlow Analyzer is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to...
NetFlow Analyzer 5 - '/jspui/appConfig.jsp?task' Cross-Site Scripting
source: https://www.securityfocus.com/bid/24766/info NetFlow Analyzer is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user ...
NetFlow Analyzer 5 - '/jspui/applicationList.jsp?alpha' Cross-Site Scripting
source: https://www.securityfocus.com/bid/24766/info NetFlow Analyzer is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user ...
NetFlow Analyzer 5 - jspuiapplicationList.jsp?alpha Cross-Site Scripting
NetFlow Analyzer 5 - jspuiapplicationList.jsp?alpha Cross-Site Scripting source: https://www.securityfocus.com/bid/24766/info NetFlow Analyzer is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues...
NetFlow Analyzer 5 - jspuiappConfig.jsp?task Cross-Site Scripting
NetFlow Analyzer 5 - jspuiappConfig.jsp?task Cross-Site Scripting source: https://www.securityfocus.com/bid/24766/info NetFlow Analyzer is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to...
NetFlow Analyzer 5 - 'netflow/jspui/index.jsp?view' Cross-Site Scripting
source: https://www.securityfocus.com/bid/24766/info NetFlow Analyzer is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user ...
NetFlow Analyzer 5 - '/jspui/selectDevice.jsp?rtype' Cross-Site Scripting
source: https://www.securityfocus.com/bid/24766/info NetFlow Analyzer is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user ...
NetFlow Analyzer 5 - '/jspui/customReport.jsp?rtype' Cross-Site Scripting
source: https://www.securityfocus.com/bid/24766/info NetFlow Analyzer is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user ...
NetFlow Analyzer 5 - jspuicustomReport.jsp?rtype Cross-Site Scripting
NetFlow Analyzer 5 - jspuicustomReport.jsp?rtype Cross-Site Scripting...
NetFlow Analyzer 5 - jspuiselectDevice.jsp?rtype Cross-Site Scripting
NetFlow Analyzer 5 - jspuiselectDevice.jsp?rtype Cross-Site Scripting source: https://www.securityfocus.com/bid/24766/info NetFlow Analyzer is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to...
