CVE-2006-3733

The CVE describes a vulnerability in CS-MARS where jmx-console/HtmlAdaptor in the JBoss web server allows a remote attacker to gain CS-MARS administrator privileges and execute arbitrary Java code via an invokeOp action in the BSHDeployer jboss.scripts service name. Affected product is Cisco CS-M...

CVE-2006-3734

Cisco CS-MARS (Security Monitoring, Analysis and Response System) prior to version 4.2.1 contains multiple vulnerabilities in the CLI that allow local administrators to execute arbitrary commands as root. Affected component is the CLI interface; root-level privilege escalation is the impact state...

Cisco Security Monitoring Analysis and Response System JBoss - Command Execution

Cisco Security Monitoring Analysis and Response System JBoss - Command Execution source: https://www.securityfocus.com/bid/19075/info Cisco Security Monitoring, Analysis and Response System CS-MARS is prone to a vulnerability that could permit the execution of arbitrary commands. An attacker coul...

CVE-2006-3732: Undefined Security Weakness

Cisco Security Monitoring, Analysis and Response System CS-MARS before 4.2.1 ships with an Oracle database that contains several default accounts and passwords, which allows attackers to obtain sensitive information...

CVE-2006-3734: Undefined Security Weakness

Multiple unspecified vulnerabilities in the Command Line Interface CLI for Cisco Security Monitoring, Analysis and Response System CS-MARS before 4.2.1, allow local CS-MARS administrators to execute arbitrary commands as root...

Cisco Security Monitoring Analysis and Response System JBoss - Command Execution

source: https://www.securityfocus.com/bid/19075/info Cisco Security Monitoring, Analysis and Response System CS-MARS is prone to a vulnerability that could permit the execution of arbitrary commands. An attacker could exploit this issue to execute arbitrary commands with administrative privileges...

CVE-2006-3168

SQL injection vulnerability in CS-Forum before 0.82 allows remote attackers to execute arbitrary SQL commands via the 1 id and 2 debut parameters in a read.php, and the 3 search and 4 debut parameters in b index.php...

CVE-2006-3169

Multiple cross-site scripting XSS vulnerabilities in CS-Forum 0.81 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 msgresult and 2 reptitre parameters in a read.php; and the 3 id and 4 parent parameters and 5 CSForumnom, 6 CSForummail, and 7 CSForumurl cookie...

CVE-2006-3170

CS-Forum before 0.82 allows remote attackers to obtain sensitive information via unspecified manipulations, possibly involving an empty collapse or readall parameter to index.php, which reveals the installation path in an error message...

CVE-2006-3171

CRLF injection vulnerability in CS-Forum before 0.82 allows remote attackers to inject arbitrary email headers via a newline character in the email parameter to ajouter.php...

CVE-2006-3168

SQL injection vulnerability in CS-Forum before 0.82 allows remote attackers to execute arbitrary SQL commands via the 1 id and 2 debut parameters in a read.php, and the 3 search and 4 debut parameters in b index.php...

CVE-2006-3169

Multiple cross-site scripting XSS vulnerabilities in CS-Forum 0.81 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 msgresult and 2 reptitre parameters in a read.php; and the 3 id and 4 parent parameters and 5 CSForumnom, 6 CSForummail, and 7 CSForumurl cookie...

CVE-2006-3170

CS-Forum before 0.82 allows remote attackers to obtain sensitive information via unspecified manipulations, possibly involving an empty collapse or readall parameter to index.php, which reveals the installation path in an error message...

CVE-2006-3171

CRLF injection vulnerability in CS-Forum before 0.82 allows remote attackers to inject arbitrary email headers via a newline character in the email parameter to ajouter.php...

CVE-2006-3168

CVE-2006-3168 is a SQL injection vulnerability in CS-Forum before version 0.82. The vulnerability allows remote attackers to execute arbitrary SQL commands through input parameters: (1) id and (2) debut in read.php, and (3) search and (4) debut in index.php. The exact root cause is an inadequate ...

CVE-2006-3169

CVE-2006-3169 affects CS-Forum 0.81 and earlier. The vulnerabilities exist in the web application’s read.php (parameters msg_result, rep_titre) and ajouter.php (parameters id, parent, CSForum_nom, CSForum_mail, CSForum_url; cookie parameters) allowing cross-site scripting. Root cause: improper ha...

CVE-2006-3170

CS-Forum prior to 0.82 is vulnerable to a remote path-disclosure via index.php, caused by unspecified manipulations (collapse[] or readall) that reveal the installation path in an error message. The affected product is CS-Forum; the indicator specifies version

CVE-2006-3171

CS-Forum prior to 0.82 is affected by a CRLF injection vulnerability that lets remote attackers inject arbitrary email headers via a newline character in the email parameter of ajouter.php. Root cause is improper handling of newline characters in user-supplied input, leading to header injection. ...

CVE-2006-3171: Undefined Security Weakness

CRLF injection vulnerability in CS-Forum before 0.82 allows remote attackers to inject arbitrary email headers via a newline character in the email parameter to ajouter.php...

CVE-2006-3169: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in CS-Forum 0.81 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 msgresult and 2 reptitre parameters in a read.php; and the 3 id and 4 parent parameters and 5 CSForumnom, 6 CSForummail, and 7 CSForumurl cookie...