PT-2021-18617

Name of the Vulnerable Software and Affected Versions Lightmeter ControlCenter versions 1.1.0 through 1.5.x before 1.5.1 Description The issue allows unauthorized access to application settings, potentially including sensitive information such as SMTP passwords and Slack access tokens, in publicl...

CVE-2021-30126: Undefined Security Weakness

Lightmeter ControlCenter 1.1.0 through 1.5.x before 1.5.1 allows anyone who knows the URL of a publicly available Lightmeter instance to access application settings, possibly including an SMTP password and a Slack access token, via a settings HTTP query...

Quick Classifieds 1.0 - controlcenter/userSet.php3 DOCUMENT_ROOT Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/28417/info Quick Classifieds is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the applicati...

Phorum 5.1.20 include/controlcenter/users.php Multiple Method Remote Privilege Escalation

No description provided by source. source: http://www.securityfocus.com/bid/23616/info Phorum is prone to multiple input-validation vulnerabilities, including an unauthorized-access issue, privilege-escalation issue, multiple SQL-injection issues, and cross-site scripting issues, because the...

CVE-2011-3392

Cross-site scripting XSS vulnerability in control.php in the controlcenter in Phorum before 5.2.17 allows remote attackers to inject arbitrary web script or HTML via the realname parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in control.php in the controlcenter in Phorum before 5.2.17 allows remote attackers to inject arbitrary web script or HTML via the realname parameter...

CVE-2011-3392

Cross-site scripting XSS vulnerability in control.php in the controlcenter in Phorum before 5.2.17 allows remote attackers to inject arbitrary web script or HTML via the realname parameter...

CVE-2011-3392

Cross-site scripting XSS vulnerability in control.php in the controlcenter in Phorum before 5.2.17 allows remote attackers to inject arbitrary web script or HTML via the realname parameter...

PT-2011-4426

Name of the Vulnerable Software and Affected Versions Phorum versions prior to 5.2.17 Description The issue allows remote attackers to inject arbitrary web script or HTML via the real name parameter in the control.php file of the controlcenter. This can lead to cross-site scripting XSS attacks...

CVE-2008-6543

Multiple PHP remote file inclusion vulnerabilities in ComScripts TEAM Quick Classifieds 1.0 via the DOCUMENTROOT parameter to 1 index.php3, 2 locate.php3, 3 searchresults.php3, 4 classifieds/index.php3, and 5 classifieds/view.php3; 6 index.php3, 7 manager.php3, 8 pass.php3, 9 remember.php3 10...

CVE-2008-6543: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in ComScripts TEAM Quick Classifieds 1.0 via the DOCUMENTROOT parameter to 1 index.php3, 2 locate.php3, 3 searchresults.php3, 4 classifieds/index.php3, and 5 classifieds/view.php3; 6 index.php3, 7 manager.php3, 8 pass.php3, 9 remember.php3 10...

ZDI-08-076: EMC Control Center SAN Manager SST_SENDFILE Remote File Retrieval Vulnerability

ZDI-08-076: EMC Control Center SAN Manager SSTSENDFILE Remote File Retrieval Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-076 November 20, 2008 -- Affected Vendors: EMC -- Affected Products: EMC ControlCenter SAN Manager -- Vulnerability Details: This vulnerability allows remo...

ZDI-08-075: EMC Control Center SAN Manager Master SST_CTGTRANS Overflow Vulnerability

ZDI-08-075: EMC Control Center SAN Manager Master SSTCTGTRANS Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-075 November 20, 2008 -- Affected Vendors: EMC -- Affected Products: EMC ControlCenter SAN Manager -- Vulnerability Details: This vulnerability allows remote...

EMC ControlCenter SAN Manager SST_CTGTRANS远程栈溢出漏洞

BUGTRAQ ID: 32389 EMC ControlCenter SAN Manager是EMC ControlCenter产品家族中用于管理SAN的组件。 SAN Manager默认监听于TCP 10444端口的Master Agent服务（msragent.exe）在处理SSTCTGTRANS请求时将报文数据拷贝到了固定大小的栈缓冲区，远程攻击者可以通过发送恶意报文触发溢出，导致以系统用户权限执行任意指令。 EMC ControlCenter 6.0 EMC ControlCenter 5.2 SP5 EMC ---...

CVE-2003-1457

Auerswald COMsuite CTI ControlCenter 3.1 creates a default "runasositron" user account with an easily guessable password, which allows local users or remote attackers to gain access...

CVE-2003-1457

Auerswald COMsuite CTI ControlCenter 3.1 creates a default user account “runasositron” with an easily guessable password, enabling local or remote access for attackers. The connected sources corroborate the existence of the default account and access impact; exploitation details, affected version...

CVE-2003-1457: Undefined Security Weakness

Auerswald COMsuite CTI ControlCenter 3.1 creates a default "runasositron" user account with an easily guessable password, which allows local users or remote attackers to gain access...

CVE-2007-2249

include/controlcenter/users.php in Phorum before 5.1.22 allows remote authenticated moderators to gain privileges via a modified 1 userids POST parameter or 2 userdata array...

CVE-2007-2249: Undefined Security Weakness

include/controlcenter/users.php in Phorum before 5.1.22 allows remote authenticated moderators to gain privileges via a modified 1 userids POST parameter or 2 userdata array...