2 matches found
Insufficient output sanitizing when generating configuration file.
PMASA-2009-3 Announcement-ID: PMASA-2009-3 Date: 2009-03-24 Summary Insufficient output sanitizing when generating configuration file. Description Setup script used to generate configuration can be fooled using a crafted POST request to include arbitrary PHP code in generated configuration file...
9.8CVSS7.7AI score0.96565EPSS
SaveExploits17Affected Software1
CVE-2005-3427: Undefined Security Weakness
The Cisco Management Center MC for IPS Sensors IPS MC 2.1 can omit port field values while generating the Cisco IOS IPS configuration file, wich can cause some signatures to be disabled and makes it easier for attackers to escape detection...
2.1CVSS5.8AI score0.00424EPSS
SaveExploits0References1
20