356 matches found
CVE-2010-3294
Cross-site scripting XSS vulnerability in apc.php in the Alternative PHP Cache APC extension before 3.1.4 for PHP allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2010-3294
Cross-site scripting XSS vulnerability in apc.php in the Alternative PHP Cache APC extension before 3.1.4 for PHP allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in apc.php in the Alternative PHP Cache APC extension before 3.1.4 for PHP allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2010-3294
Cross-site scripting XSS vulnerability in apc.php in the Alternative PHP Cache APC extension before 3.1.4 for PHP allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2010-3294
CVE-2010-3294 is a cross-site scripting vulnerability in the APC project’s apc.php (APC extension for PHP) present before version 3.1.4. The vulnerability enables remote attackers to inject arbitrary script/HTML via unspecified vectors. Publicly cited fixes include upgrading the APC package to ve...
APC Network Management Card web interface vulnerable to cross-site scripting and cross-site request forgery
Overview The web management interface for the APC Network Monitoring Card NMC used in various APC devices contains cross-site scripting XSS and cross-site request forgery CSRF/XSRF vulnerabilities. By convincing a victim to load a specially crafted URL while authenticated to an NMC, an attacker...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities on the Network Management Card NMC on American Power Conversion APC Switched Rack PDU aka Rack Mount Power Distribution devices and other devices allow remote attackers to hijack the authentication of 1 administrator or 2 device users for...
CVE-2009-1797
Multiple cross-site request forgery CSRF vulnerabilities on the Network Management Card NMC on American Power Conversion APC Switched Rack PDU aka Rack Mount Power Distribution devices and other devices allow remote attackers to hijack the authentication of 1 administrator or 2 device users for...
CVE-2009-1798
Multiple cross-site scripting XSS vulnerabilities on the Network Management Card NMC on American Power Conversion APC Switched Rack PDU aka Rack Mount Power Distribution devices and other devices allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: the...
CVE-2009-1798
CVE-2009-1798 refers to multiple cross-site scripting (XSS) vulnerabilities in the APC Network Management Card (NMC) used in APC Switched Rack PDU devices. The issue is that the NMC web interface does not adequately validate user-supplied data, allowing remote attackers to inject arbitrary web sc...
CVE-2009-1797
The CVE-2009-1797 issue affects the APC Network Management Card (NMC) web interface used in APC UPS/Rack PDU products. It describes cross‑site request forgery (CSRF) vulnerabilities that can allow an attacker to hijack a user’s session and perform actions such as creating new administrative users...
CVE-2009-1797
Multiple cross-site request forgery CSRF vulnerabilities on the Network Management Card NMC on American Power Conversion APC Switched Rack PDU aka Rack Mount Power Distribution devices and other devices allow remote attackers to hijack the authentication of 1 administrator or 2 device users for...
Cross site scripting
Cross-site scripting XSS vulnerability in Forms/login1 in American Power Conversion APC Switched Rack PDU AP7932 B2, running rpdu 3.3.3 or 3.7.0 on AOS 3.3.4, and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the loginusername parameter...
CVE-2009-4406
Cross-site scripting XSS vulnerability in Forms/login1 in American Power Conversion APC Switched Rack PDU AP7932 B2, running rpdu 3.3.3 or 3.7.0 on AOS 3.3.4, and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the loginusername parameter...
CVE-2009-4406
Cross-site scripting XSS vulnerability in Forms/login1 in American Power Conversion APC Switched Rack PDU AP7932 B2, running rpdu 3.3.3 or 3.7.0 on AOS 3.3.4, and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the loginusername parameter...
CVE-2009-4406
CVE-2009-4406 is an XSS in the APC Network Monitoring/Card web interface. The vulnerability affects the NMC login form: Forms/login1?login_username on AP7932 B2 devices (rpdu 3.3.3 or 3.7.0 on AOS 3.3.4 and possibly other versions) allowing remote attackers to inject arbitrary script/HTML. Conseq...
APC Switched Rack PDU Cross Site Scripting
APC Switched Rack PDU XSS Vulnerability By Jamal Pecou jpecou at gmail dot c0m. Product Info Product InfoTested Versions Model = AP7932 Harware Revision = B2 Application Module Name = rpdu Version = v3.3.3Tested First Version = 3.7.0Current APC OS AOS Name = aos Version = v3.3.4 Vulnerability XSS...
APC Switched Rack PDU XSS Vulnerability
APC Switched Rack PDU XSS Vulnerability By Jamal Pecou jpecou at gmail dot c0m. Product Info Product InfoTested Versions Model = AP7932 Harware Revision = B2 Application Module Name = rpdu Version = v3.3.3Tested First Version = 3.7.0Current APC OS AOS Name = aos Version = v3.3.4 Vulnerability XSS...
APC Network Management Card - Cross-Site Request Forgery / Cross-Site Scripting
source: https://www.securityfocus.com/bid/37338/info The APC Network Management Card is prone to multiple cross-site request-forgery and cross-site scripting vulnerabilities. An attacker can exploit the cross-site request forgery issues to alter the settings on affected devices, which may lead to...