369 matches found
Cerberus FTPServer 1.71/2.1/2.32 Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8452/info It has been reported that some versions of Cerberus FTP Server may be prone to remote denial of service attacks. The problem is said to occur when the order of a carriage return and line feed are prefixed to a...
Cerberus Helpdesk 0.97.3/2.6.1 - Multiple Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/13897/info Cerberus Helpdesk is affected by various cross-site scripting vulnerabilities. These issues could permit a remote attacker to create a malicious URI link that includes hostile HTML and script code. If this link...
Pentagram Cerberus P 6363 DSL Router - Multiple Vulnerabilities
No description provided by source. PENTAGRAM Cerberus P 6363 DSL Router Multiple Vulnerabilities Found by condis Vendor Site / Model: http://www.pentagram.pl/produkty/cerberus-p-6363 Firmware version: V5.07.28PEN01 Software version: V3.0 1. Prolog Cerberus P 6363 is simple SOHO class router. Its...
Cerberus Helpdesk 2.x Spellwin.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/21423/info Cerberus Helpdesk is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execu...
Cerberus Helpdesk 2.649 display_ticket_thread.php ticket Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/16062/info Cerberus Helpdesk is prone to multiple cross-site scripting and SQL injection vulnerabilities. These issues are the result of inadequate validation of user-supplied input that will be included in site output or...
Cerberus FTP Server SFTP Username Enumeration
This module uses a dictionary to brute force valid usernames from Cerberus FTP server via SFTP. This issue affects all versions of the software older than 6.0.9.0 or 7.0.0.2 and is caused by a discrepancy in the way the SSH service handles failed logins for valid and invalid users. This issue was...
Cerberus FTP Server < 5.0.8.0 / 6.x < 6.0.7.0 Web Client Security Bypass
The version of Cerberus FTP Server on the remote host is a version prior to 5.0.8.0 or version 6.x prior to 6.0.7.0. As such, it is potentially affected by a security bypass vulnerability. An authenticated attacker could obtain sensitive files via the HTTP/S interface. C Tenable Network Security,...
Cerberus FTP Server HTTP/S Web客户端安全限制绕过漏洞
Cerberus FTP Server是一款适用在Windows操作系统上的FTP服务程序。 Cerberus FTP Server 6.0.7之前版本在HTTP/S web客户端的实现上存在安全漏洞，可被恶意利用泄露服务器上的受限制访问资源。 0 Cerberus FTP Server 6.0.7 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.cerberusftp.com/...
Pentagram Cerberus P 6363 DSL Router - Multiple Vulnerabilities
Pentagram Cerberus P 6363 DSL Router - Multiple Vulnerabilities PENTAGRAM Cerberus P 6363 DSL Router Multiple Vulnerabilities Found by condis Vendor Site / Model: http://www.pentagram.pl/produkty/cerberus-p-6363 Firmware version: V5.07.28PEN01 Software version: V3.0 1. Prolog Cerberus P 6363 is...
Pentagram Cerberus P 6363 DSL Router - Multiple Vulnerabilities
PENTAGRAM Cerberus P 6363 DSL Router Multiple Vulnerabilities Found by condis Vendor Site / Model: http://www.pentagram.pl/produkty/cerberus-p-6363 Firmware version: V5.07.28PEN01 Software version: V3.0 1. Prolog Cerberus P 6363 is simple SOHO class router. Its producer claims that it may act as ...
KLA10102 OSI vulnerability in Cerberus FTP Server
An unspecified vulnerability was found in the Cerberus FTP Server. By exploiting this vulnerability malicious users can obtain information about user accounts. This vulnerability can be exploited from the network at a point related to SSH auth via login result analysis. Original advisories Cerber...
Cerberus FTP Server < 5.0.5.0 Cross-Site Request Forgery
The version of Cerberus FTP server on the remote host is earlier than 5.0.5.0. As such, it is potentially affected by a cross-site request forgery CSRF vulnerability that can be used to trick an authenticated administrator into making unintended changes to the application. C Tenable Network...
Cerberus FTP Server < 5.0.4.0 SSH DES Cipher Weakness
The version of Cerberus FTP server on the remote host is earlier than 5.0.4.0. Such versions reportedly support the DES cipher for SSH sessions. This can create more favorable conditions for brute-force attacks on the encrypted network traffic. C Tenable Network Security, Inc. include'compat.inc'...
Cerberus FTP Server < 5.0.6.0 Multiple XSS
The version of Cerberus FTP server on the remote host is earlier than 5.0.6.0. As such, it is potentially affected by the following cross- site scripting vulnerabilities : - The user-supplied input for fields under administration 'Messages' tab are not validated before being returned to the user....
Cerberus FTP Server crossite scripting
Crossite scripting in administration interface...
Multiple XSS vulnerabilities in Cerberus FTP Server <= 5.0.5.1 [CVE-2012-6339]
Overview =============== Cerberus FTP Server http://www.cerberusftp.com/ is a secure and reliable FTP server with many features and available functionality. It was discovered that the Web Administration interface has multiple persistent Cross Site Scripting XSS vulnerabilities. In the log viewer...
CVE-2012-6339
Multiple cross-site scripting XSS vulnerabilities in the administrative web interface in Cerberus FTP Server before 5.0.6.0 allow 1 remote attackers to inject arbitrary web script or HTML via a log entry that is not properly handled within the Log Manager component, and might allow 2 remote...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the administrative web interface in Cerberus FTP Server before 5.0.6.0 allow 1 remote attackers to inject arbitrary web script or HTML via a log entry that is not properly handled within the Log Manager component, and might allow 2 remote...
CVE-2012-6339
Multiple cross-site scripting XSS vulnerabilities in the administrative web interface in Cerberus FTP Server before 5.0.6.0 allow 1 remote attackers to inject arbitrary web script or HTML via a log entry that is not properly handled within the Log Manager component, and might allow 2 remote...
CVE-2012-6339
Cerberus FTP Server has multiple XSS vulnerabilities in the Web Administration interface (log viewer and servermanager commands) affecting versions before 5.0.6.0. An attacker could inject arbitrary web script/HTML through log entries in the Log Manager or through a Messages field in servermanage...