cbm-thai.com Cross Site Scripting vulnerability OBB-3945471

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

cbm-hackers.2304266.n4.nabble.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1184943 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

cbm.com.vn XSS vulnerability

Open Bug Bounty ID: OBB-673122 Description| Value ---|--- Affected Website:| cbm.com.vn Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

cbm-thai.com XSS vulnerability

Open Bug Bounty ID: OBB-579552 Description| Value ---|--- Affected Website:| cbm-thai.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2013-3520

CVE-2013-3520 affects VMware vCenter Chargeback Manager (CBM) prior to 2.5.1. The vulnerability arises from improper handling of uploads in the ImageUploadServlet, enabling remote attackers to upload files and execute arbitrary code via unspecified vectors. Reported in multiple feeds (NVD/NVD-der...

CVE-2012-1472

CVE-2012-1472 affects VMware vCenter Chargeback Manager (CBM) prior to 2.0.1. The vulnerability arises from improper handling of XML API requests, allowing an unauthenticated remote attacker to read arbitrary files on the CBM server or cause a denial-of-service. VMware’s advisory and advisories n...

CVE-2012-1472

VMware vCenter Chargeback Manager aka CBM before 2.0.1 does not properly handle XML API requests, which allows remote attackers to read arbitrary files or cause a denial of service via unspecified vectors...