CVE-2010-2896

IBM FileNet Content Manager CM 4.0.0, 4.0.1, 4.5.0, and 4.5.1 before FP4 does not properly manage the InheritParentPermissions setting during an upgrade from 3.x, which might allow attackers to bypass intended folder permissions via unspecified vectors...

CVE-2010-1041

The CVE-2010-1041 entry concerns IBM DB2 Content Manager (CM) Toolkit 8.3 before FP13 on z/OS and DB2 Information Integrator for Content 8.3 before FP13. The vulnerability is in the single sign-on Web Services implementation; the root cause is not specified in the available documents. Impact is d...

http-methods NSE Script

Finds out what options are supported by an HTTP server by sending an OPTIONS request. Lists potentially risky methods. It tests those methods not mentioned in the OPTIONS headers individually and sees if they are implemented. Any output other than 501/405 suggests that the method is if not in the...

CVE-2003-1576

CVE-2003-1576 describes a buffer overflow in pamverifier within Change Manager (CM) 1.0 for Sun Management Center (SunMC) 3.0 on Solaris 8/9 SPARC. The vulnerability allows remote code execution via unspecified vectors. Affected components include pamverifier in CM 1.0 on Solaris SPARC. The issue...

Serena Dimensions CM cryptographic vulnerability

Server certificate is not validated by client...

Serena Dimensions CM Desktop Client does not validate the server SSL certificate

Application: Serena Dimensions CM Affected versions: 10.1 and later Vulnerability: man-in-the-middle attacks Problem type: remote Problem description: ==================== The client/server connection can be SSL encrypted by setting "-ssl" in the listener.dat. The problem is that the Desktop clie...

Baran CMS 1.0 Arbitrary ASP File Upload/DB/SQL/XSS/CM Vulns

No description provided by source. 0x01 Informations : Name : Baran Cms Version : 1.0 Personal site : http://www.baran-cms.ir $$ : 50$ Vul : Arbitrary ASP File Upload/DB/SQL/XSS/CM Credit : Aria-Security Team Website : http://Aria-Security.Net Contact : [email protected] 0x02 Arbitrary ASP...

Baran CMS 1.0 Arbitrary ASP File Upload/DB/SQL/XSS/CM Vulns

Exploit for unknown platform in category web applications =========================================================== Baran CMS 1.0 Arbitrary ASP File Upload/DB/SQL/XSS/CM Vulns =========================================================== 0x01 Informations : Name : Baran Cms Version : 1.0 Personal...

RankEm (DD/XSS/CM) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ================================================== RankEm DD/XSS/CM Multiple Remote Vulnerabilities ================================================== --------------------------------------------------------- Portal Name: RankEm Download :...

CVE-2008-5709

CVE-2008-5709 affects Avaya Communication Manager (CM) web management interface. Affects CM versions 3.1 before 3.1.4 SP2, 4.0 before 4.0.3 SP1, and 5.0 before 5.0 SP3. Remote authenticated users can execute arbitrary code via unknown vectors in the (1) Set Static Routes and (2) Backup History co...

securedownload-xsscm.txt

--------------------------------------------------------- Portal Name: Secure Download Version : Alpha 0.2.1 Vendor : http://relative.nl/projects.php?subMnuItem=2 Author : PouyaServer , [email protected] Vulnerability : XSS,CM --------------------------------------------------------- XSS:...

aspforum-cmsqlxss.txt

--------------------------------------------------------- Portal Name: ASP Forum Script Vendor : http://codetoad.com/demos/forum/ Author : PouyaServer , [email protected] Vulnerability : CM,XSS,SQL --------------------------------------------------------- SQL:...

prejobboard-cmsqlxss.txt

--------------------------------------------------------- Portal Name: Pre Job Board Vendor : http://www.preproject.com/ Author : PouyaServer , [email protected] Vulnerability : SQL,CM,XSS --------------------------------------------------------- SQL:...

phpjobwebsite-cmsqlxss.txt

--------------------------------------------------------- Portal Name: PHP JOBWEBSITE PRO Vendor : http://preproject.com Author : PouyaServer , [email protected] Vulnerability : CM,XSS,SQL --------------------------------------------------------- SQL:...

Unfixed XSS vulnerability at www.cm-coimbra.pt

Security researcher BackDoor, has submitted on 20/05/2008 a cross-site-scripting XSS vulnerability affecting www.cm-coimbra.pt, which at the time of submission ranked 665120 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/06/2008. It is...

Directory traversal

Directory traversal vulnerability in cm/graphie.php in Content Management System 0.6.1 for Phprojekt allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cmimgpath parameter...

CVE-2008-1306

This CVE (CVE-2008-1306) concerns multiple XSS vulnerabilities in Savvy Content Manager CM. The issues allow remote attackers to inject arbitrary web script or HTML via the searchterms parameter to three pages: searchresults.cfm, search_results.cfm, and search_results/index.cfm. The NVD entry lis...

CVE-2007-5413

HP OpenView Radia Integration Server, specifically httpd.tkd, is affected in CM Infrastructure v4.0–4.2i and CCM v2.0. The vulnerability arises from insufficient validation of URLs containing tilde references (e.g., ~root) in the HTTP server bound to TCP port 3465, enabling remote attackers to re...

CVE-2007-1491

Apache Tomcat in Avaya S87XX, S8500, and S8300 before CM 3.1.3, and Avaya SES allows connections from external interfaces via port 8009, which exposes it to attacks from outside parties...

Command injection

Unspecified maintenance web pages in Avaya S87XX, S8500, and S8300 before CM 3.1.3, and Avaya SES allow remote authenticated users to execute arbitrary commands via shell metacharacters in unspecified vectors aka "shell command injection"...