28 matches found
CVE-2013-6235
Multiple cross-site scripting XSS vulnerabilities in JAMon Java Application Monitor 2.7 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 listenertype or 2 currentlistener parameter to mondetail.jsp or ArraySQL parameter to 3 mondetail.jsp, 4 jamonadmin.jsp, 5...
CVE-2013-6235
Multiple cross-site scripting XSS vulnerabilities in JAMon Java Application Monitor 2.7 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 listenertype or 2 currentlistener parameter to mondetail.jsp or ArraySQL parameter to 3 mondetail.jsp, 4 jamonadmin.jsp, 5...
CVE-2013-6235
CVE-2013-6235 refers to multiple reflected XSS vulnerabilities in JAMon (Java Application Monitor) v2.7 and earlier. The flaw allows remote attackers to inject arbitrary script/HTML via unsanitized input in parameters such as listenertype and currentlistener (in mondetail.jsp) and ArraySQL (in mo...
JAMon 2.7 Cross Site Scripting
Advisory Information Title: Multiple Reflected XSS vulnerabilities in JAMon Date published: 2013-01-23 Date of last update: 2013-01-23 Vendors contacted: JAMon v 2.7 Discovered by: Christian Catalano Severity: Low 02. Vulnerability Information CVE reference: CVE-2013-6235 CVSS v2 Base Score:...
SolarWinds Server and Application Monitor - ActiveX Pepco32c Buffer Overflow
SolarWinds Server and Application Monitor - ActiveX Pepco32c Buffer Overflow ' 132 bytes in we control ecx before the call ecx instruction buffer = String132, "A" ecx = String4, "B" junk = String3086, "C" arg1 = buffer + ecx + junk target.PEstrarg1 = arg1...
SolarWinds Server and Application Monitor - ActiveX 'Pepco32c' Buffer Overflow
' 132 bytes in we control ecx before the call ecx instruction buffer = String132, "A" ecx = String4, "B" junk = String3086, "C" arg1 = buffer + ecx + junk target.PEstrarg1 = arg1...
Hyperic HQ Enterprise 4.5.1 - Cross-Site Scripting / Multiple Security Vulnerabilities
source: https://www.securityfocus.com/bid/50456/info Hyperic HQ Enterprise is prone to a cross-site scripting vulnerability and multiple unspecified security vulnerabilities. An attacker may leverage the cross-site scripting issue to execute arbitrary script code in the browser of an unsuspecting...
CVE-2008-4559
HP OpenView Network Node Manager OV NNM 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via shell metacharacters in argument fields to the 1 webappmon.exe or 2 OpenView5.exe CGI program. NOTE: this issue may be partially covered by CVE-2009-0205...