870 matches found
CVE-2003-1576
CVE-2003-1576 describes a buffer overflow in pamverifier within Change Manager (CM) 1.0 for Sun Management Center (SunMC) 3.0 on Solaris 8/9 SPARC. The vulnerability allows remote code execution via unspecified vectors. Affected components include pamverifier in CM 1.0 on Solaris SPARC. The issue...
CVE-2003-1576: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in pamverifier in Change Manager CM 1.0 for Sun Management Center SunMC 3.0 on Solaris 8 and 9 on the sparc platform allows remote attackers to execute arbitrary code via unspecified vectors...
Serena Dimensions CM Desktop Client does not validate the server SSL certificate
Application: Serena Dimensions CM Affected versions: 10.1 and later Vulnerability: man-in-the-middle attacks Problem type: remote Problem description: ==================== The client/server connection can be SSL encrypted by setting "-ssl" in the listener.dat. The problem is that the Desktop clie...
Serena Dimensions CM cryptographic vulnerability
Server certificate is not validated by client...
Baran CMS 1.0 Arbitrary ASP File Upload/DB/SQL/XSS/CM Vulns
No description provided by source. 0x01 Informations : Name : Baran Cms Version : 1.0 Personal site : http://www.baran-cms.ir $$ : 50$ Vul : Arbitrary ASP File Upload/DB/SQL/XSS/CM Credit : Aria-Security Team Website : http://Aria-Security.Net Contact : [email protected] 0x02 Arbitrary ASP...
Baran CMS 1.0 Arbitrary ASP File Upload/DB/SQL/XSS/CM Vulns
Exploit for unknown platform in category web applications =========================================================== Baran CMS 1.0 Arbitrary ASP File Upload/DB/SQL/XSS/CM Vulns =========================================================== 0x01 Informations : Name : Baran Cms Version : 1.0 Personal...
RankEm (DD/XSS/CM) Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ================================================== RankEm DD/XSS/CM Multiple Remote Vulnerabilities ================================================== --------------------------------------------------------- Portal Name: RankEm Download :...
CVE-2008-5709
CVE-2008-5709 affects Avaya Communication Manager (CM) web management interface. Affects CM versions 3.1 before 3.1.4 SP2, 4.0 before 4.0.3 SP1, and 5.0 before 5.0 SP3. Remote authenticated users can execute arbitrary code via unknown vectors in the (1) Set Static Routes and (2) Backup History co...
securedownload-xsscm.txt
--------------------------------------------------------- Portal Name: Secure Download Version : Alpha 0.2.1 Vendor : http://relative.nl/projects.php?subMnuItem=2 Author : PouyaServer , [email protected] Vulnerability : XSS,CM --------------------------------------------------------- XSS:...
prejobboard-cmsqlxss.txt
--------------------------------------------------------- Portal Name: Pre Job Board Vendor : http://www.preproject.com/ Author : PouyaServer , [email protected] Vulnerability : SQL,CM,XSS --------------------------------------------------------- SQL:...
aspforum-cmsqlxss.txt
--------------------------------------------------------- Portal Name: ASP Forum Script Vendor : http://codetoad.com/demos/forum/ Author : PouyaServer , [email protected] Vulnerability : CM,XSS,SQL --------------------------------------------------------- SQL:...
phpjobwebsite-cmsqlxss.txt
--------------------------------------------------------- Portal Name: PHP JOBWEBSITE PRO Vendor : http://preproject.com Author : PouyaServer , [email protected] Vulnerability : CM,XSS,SQL --------------------------------------------------------- SQL:...
Unfixed XSS vulnerability at www.cm-coimbra.pt
Security researcher BackDoor, has submitted on 20/05/2008 a cross-site-scripting XSS vulnerability affecting www.cm-coimbra.pt, which at the time of submission ranked 665120 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/06/2008. It is...
Directory traversal
Directory traversal vulnerability in cm/graphie.php in Content Management System 0.6.1 for Phprojekt allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cmimgpath parameter...
CVE-2008-2217: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in cm/graphie.php in Content Management System 0.6.1 for Phprojekt allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cmimgpath parameter...
CVE-2008-1306
This CVE (CVE-2008-1306) concerns multiple XSS vulnerabilities in Savvy Content Manager CM. The issues allow remote attackers to inject arbitrary web script or HTML via the searchterms parameter to three pages: searchresults.cfm, search_results.cfm, and search_results/index.cfm. The NVD entry lis...
CVE-2008-1306: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Savvy Content Manager CM allow remote attackers to inject arbitrary web script or HTML via the searchterms parameter to 1 searchresults.cfm, 2 searchresults.cfm, and 3 searchresults/index.cfm. NOTE: the provenance of this information is unknown...
CVE-2007-6525: Undefined Security Weakness
Unspecified vulnerability in eClient in IBM DB2 Content Manager CM Toolkit 8.3 before fix pack 7 for z/OS has unknown impact and attack vectors, related to "scripting."...
CVE-2007-5413
HP OpenView Radia Integration Server, specifically httpd.tkd, is affected in CM Infrastructure v4.0–4.2i and CCM v2.0. The vulnerability arises from insufficient validation of URLs containing tilde references (e.g., ~root) in the HTTP server bound to TCP port 3465, enabling remote attackers to re...
