CVE-2008-1969

CVE-2008-1969 affects Cezanne 6.5.1 and 7, with multiple XSS vulnerabilities that allow remote attackers to inject arbitrary script/HTML via various URL and form parameters (e.g., CFLookUP.asp inputs; CznCommon/CznCustomContainer.asp inputs; Home.asp CFTARGET; CVCard.asp PersonOid; PayrollCard.as...

CVE-2008-1967

CVE-2008-1967 describes a Cross-site Scripting (XSS) vulnerability in CFLogon/CFLogon.asp for Cezanne 6.5.1 and 7, exploitable via the SleUserName parameter to inject arbitrary web script/HTML. Affected component: CFLogon.asp (Cezanne); root cause: insufficient input validation for SleUserName le...

CVE-2008-1968

CVE-2008-1968 affects Cezanne 7 with multiple SQL injection flaws exploitable via the FUNID parameter in CFLookup.asp and CznCommon/CznCustomContainer.asp. The underlying issue is unsafely constructed SQL from the FUNID input, enabling remote authenticated users to execute arbitrary SQL commands....

S21SEC-042-en:Cezanne SW Cross-Site Scripting (login required)

S21Sec Advisory - Title: Cezanne SW Cross-Site Scripting login required ID: S21SEC-042-en Severity: Medium History: 02.Jan.2008 Vulnerability discovered Authors: Juan de la Fuente Costa [email protected] Fco Javier Puerta Rubio [email protected] URL:...

S21SEC-041-en:Cezanne SW Cross-Site Scripting

S21Sec Advisory - Title: Cezanne SW Cross-Site Scripting ID: S21SEC-041-en Severity: Medium History: 02.Jan.2008 Vulnerability discovered Authors: Juan de la Fuente Costa [email protected] Fco Javier Puerta Rubio [email protected] URL: http://www.s21sec.com/avisos/s21sec-41-en.txt SUMMARY...

S21SEC-043-en:Cezanne SW Blind SQL Injection

S21Sec Advisory - Title: Cezanne SW login required Blind SQL Injection ID: S21SEC-043-en Severity: High History: 02.Jan.2008 Vulnerability discovered Authors: Juan de la Fuente Costa [email protected] Fco Javier Puerta Rubio [email protected] URL: http://www.s21sec.com/avisos/s21sec-43-en.txt...

Cezanne Software 6.5.17 - CFLogon.asp Cross-Site Scripting

Cezanne Software 6.5.17 - CFLogon.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/28774/info Cezanne Software is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...

Cezanne 7 - CznCommonCznCustomContainer.asp?FUNID SQL Injection

Cezanne 7 - CznCommonCznCustomContainer.asp?FUNID SQL Injection source: https://www.securityfocus.com/bid/28773/info Cezanne Software is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these...

Cezanne 7 - '/CznCommon/CznCustomContainer.asp?FUNID' SQL Injection

source: https://www.securityfocus.com/bid/28773/info Cezanne Software is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application,...

Cezanne 7 - 'cflookup.asp?FUNID' SQL Injection

source: https://www.securityfocus.com/bid/28773/info Cezanne Software is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application,...

Cezanne Software 6.5.1/7 - 'CFLogon.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/28774/info Cezanne Software is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting use...

Cezanne 6.5.1/7 - 'CznCustomContainer.asp' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/28772/info Cezanne Software is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. Authenticated attackers may leverage these issues to execute arbitrary script code in the browser of an...

Cezanne 6.5.1/7 - 'home.asp?CFTARGET' Cross-Site Scripting

source: https://www.securityfocus.com/bid/28772/info Cezanne Software is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. Authenticated attackers may leverage these issues to execute arbitrary script code in the browser of an...

Cezanne 6.5.17 - cflookup.asp Multiple Cross-Site Scripting Vulnerabilities

Cezanne 6.5.17 - cflookup.asp Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/28772/info Cezanne Software is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. Authenticated attackers may levera...

Cezanne 6.5.17 - CznCustomContainer.asp Multiple Cross-Site Scripting Vulnerabilities

Cezanne 6.5.17 - CznCustomContainer.asp Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/28772/info Cezanne Software is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. Authenticated attackers...

s21sec-43-en.txt

S21Sec Advisory - Title: Cezanne SW login required Blind SQL Injection ID: S21SEC-043-en Severity: High History: 02.Jan.2008 Vulnerability discovered Authors: Juan de la Fuente Costa [email protected] Fco Javier Puerta Rubio [email protected] URL: http://www.s21sec.com/avisos/s21sec-43-en.txt...

s21sec-42-en.txt

S21Sec Advisory - Title: Cezanne SW Cross-Site Scripting login required ID: S21SEC-042-en Severity: Medium History: 02.Jan.2008 Vulnerability discovered Authors: Juan de la Fuente Costa [email protected] Fco Javier Puerta Rubio [email protected] URL:...

Cezanne 7 - cflookup.asp?FUNID SQL Injection

Cezanne 7 - cflookup.asp?FUNID SQL Injection source: https://www.securityfocus.com/bid/28773/info Cezanne Software is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow a...

s21sec-41-en.txt

S21Sec Advisory - Title: Cezanne SW Cross-Site Scripting ID: S21SEC-041-en Severity: Medium History: 02.Jan.2008 Vulnerability discovered Authors: Juan de la Fuente Costa [email protected] Fco Javier Puerta Rubio [email protected] URL: http://www.s21sec.com/avisos/s21sec-41-en.txt SUMMARY...

Cezanne 6.5.17 - home.asp?CFTARGET Cross-Site Scripting

Cezanne 6.5.17 - home.asp?CFTARGET Cross-Site Scripting source: https://www.securityfocus.com/bid/28772/info Cezanne Software is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. Authenticated attackers may leverage these issues to...