CVE-2011-1744

EMC Captiva eInput 2.1.1 before 2.1.1.37 does not restrict the origin of calls to ActiveX functions, which allows remote attackers to read arbitrary files or cause a denial of service via a crafted web site...

Cross site scripting

Cross-site scripting XSS vulnerability in EMC Captiva eInput 2.1.1 before 2.1.1.37 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-1743

Cross-site scripting XSS vulnerability in EMC Captiva eInput 2.1.1 before 2.1.1.37 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-1743

CVE-2011-1743 is an XSS vulnerability in EMC Captiva eInput 2.1.1 prior to 2.1.1.37. The issue affects EMC Captiva eInput components (2.1.1 family) and allows remote attackers to inject script/HTML via unspecified vectors; CVSS details in NVD indicate a medium base score with partial integrity im...

CVE-2011-1744

EMC Captiva eInput 2.1.1 before 2.1.1.37 does not restrict the origin of calls to ActiveX functions, which allows remote attackers to read arbitrary files or cause a denial of service via a crafted web site...

CVE-2011-1744

EMC Captiva eInput 2.1.1 before 2.1.1.37 is affected by CVE-2011-1744, where ActiveX function calls are not restricted to trusted origins. This enables a remote attacker to read arbitrary files or cause a denial of service via a crafted web site. The issue affects EMC Captiva eInput versions prio...

EMC Captiva eInput security vulnerabilities

Crossite scripting, unsafe ActiveX methods...

PT-2011-3344

Name of the Vulnerable Software and Affected Versions EMC Captiva eInput version 2.1.1 before 2.1.1.37 Description The issue allows remote attackers to read arbitrary files or cause a denial of service via a crafted web site, due to the lack of restriction on the origin of calls to ActiveX...

CVE-2011-1743: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in EMC Captiva eInput 2.1.1 before 2.1.1.37 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-1744: Undefined Security Weakness

EMC Captiva eInput 2.1.1 before 2.1.1.37 does not restrict the origin of calls to ActiveX functions, which allows remote attackers to read arbitrary files or cause a denial of service via a crafted web site...

ESA-2011-024: EMC Captiva eInput multiple vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2011-024: EMC Captiva eInput multiple vulnerabilities. EMC Identifier: ESA-2011-024 CVE Identifier: CVE-2011-1743, CVE-2011-1744 Affected products: EMC SW: EMC Captiva eInput 2.1.1 Vulnerability Summary: EMC Captiva eInput contains two...

PT-2011-3343

Name of the Vulnerable Software and Affected Versions EMC Captiva eInput version 2.1.1 before 2.1.1.37 can be simplified to: EMC Captiva eInput versions 2.1.1 through 2.1.1.36 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML...