Cross site scripting

Cross-site scripting XSS vulnerability in control.php in the controlcenter in Phorum before 5.2.17 allows remote attackers to inject arbitrary web script or HTML via the realname parameter...

CVE-2011-3392

Cross-site scripting XSS vulnerability in control.php in the controlcenter in Phorum before 5.2.17 allows remote attackers to inject arbitrary web script or HTML via the realname parameter...

CVE-2008-6543

Multiple PHP remote file inclusion vulnerabilities in ComScripts TEAM Quick Classifieds 1.0 via the DOCUMENTROOT parameter to 1 index.php3, 2 locate.php3, 3 searchresults.php3, 4 classifieds/index.php3, and 5 classifieds/view.php3; 6 index.php3, 7 manager.php3, 8 pass.php3, 9 remember.php3 10...

ZDI-08-075: EMC Control Center SAN Manager Master SST_CTGTRANS Overflow Vulnerability

ZDI-08-075: EMC Control Center SAN Manager Master SSTCTGTRANS Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-075 November 20, 2008 -- Affected Vendors: EMC -- Affected Products: EMC ControlCenter SAN Manager -- Vulnerability Details: This vulnerability allows remote...

ZDI-08-076: EMC Control Center SAN Manager SST_SENDFILE Remote File Retrieval Vulnerability

ZDI-08-076: EMC Control Center SAN Manager SSTSENDFILE Remote File Retrieval Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-076 November 20, 2008 -- Affected Vendors: EMC -- Affected Products: EMC ControlCenter SAN Manager -- Vulnerability Details: This vulnerability allows remo...

EMC ControlCenter SAN Manager SST_CTGTRANS远程栈溢出漏洞

BUGTRAQ ID: 32389 EMC ControlCenter SAN Manager是EMC ControlCenter产品家族中用于管理SAN的组件。 SAN Manager默认监听于TCP 10444端口的Master Agent服务（msragent.exe）在处理SSTCTGTRANS请求时将报文数据拷贝到了固定大小的栈缓冲区，远程攻击者可以通过发送恶意报文触发溢出，导致以系统用户权限执行任意指令。 EMC ControlCenter 6.0 EMC ControlCenter 5.2 SP5 EMC ---...

CVE-2003-1457

Auerswald COMsuite CTI ControlCenter 3.1 creates a default user account “runasositron” with an easily guessable password, enabling local or remote access for attackers. The connected sources corroborate the existence of the default account and access impact; exploitation details, affected version...

CVE-2003-1457

Auerswald COMsuite CTI ControlCenter 3.1 creates a default "runasositron" user account with an easily guessable password, which allows local users or remote attackers to gain access...

CVE-2007-2249

include/controlcenter/users.php in Phorum before 5.1.22 allows remote authenticated moderators to gain privileges via a modified 1 userids POST parameter or 2 userdata array...