40 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in Emweb Wt before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to "insertions of the URL" that occur during a redirection...
CVE-2010-1274
Cross-site scripting XSS vulnerability in Emweb Wt before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to "insertions of the URL" that occur during a redirection...
CVE-2010-1273
Emweb Wt before 3.1.1 does not validate the UTF-8 encoding of 1 form values and 2 JSignal arguments, which has unspecified impact and remote attack vectors...
CVE-2010-1274
Cross-site scripting XSS vulnerability in Emweb Wt before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to "insertions of the URL" that occur during a redirection...
CVE-2010-1274
CVE-2010-1274 describes a cross-site scripting (XSS) vulnerability in Emweb Wt before 3.1.1. The issue arises from vectors related to the insertion of the URL during redirection, allowing remote attackers to inject arbitrary web script or HTML. Affected product: Emweb Wt (web toolkit) prior to 3....
CVE-2010-1273
CVE-2010-1273 affects Emweb Wt prior to 3.1.1. The root cause is that UTF-8 encoding for (1) form values and (2) JSignal arguments is not validated. The provided sources describe the condition and impact as unspecified, with remote attack vectors implied but not detailed. No remediation or fixed ...
Virata EmWeb R6.0.1 Remote Crash Vulnerability
Exploit for linux platform in category dos / poc ============================================== Virata EmWeb R6.0.1 Remote Crash Vulnerability ============================================== Exploit Title: Virata EmWeb R6.0.1 Remote Crash Vulnerability Date: 06/04/10 Author: Jobert Abma Online 24...
Virata EmWeb R6.0.1 - Remote Crash
Virata EmWeb R6.0.1 - Remote Crash Exploit Title: Virata EmWeb R6.0.1 Remote Crash Vulnerability Date: 06/04/10 Author: Jobert Abma Online 24 Email: j.abmaatonline24dotnl Version: R6.0.1 Tested on: linux CVE : Code : This was written for educational purpose. Use it at your own risk. Author will b...
CVE-2010-1273: Improper Input Validation
Emweb Wt before 3.1.1 does not validate the UTF-8 encoding of 1 form values and 2 JSignal arguments, which has unspecified impact and remote attack vectors...
Virata EmWeb R6.0.1 - Remote Crash
Exploit Title: Virata EmWeb R6.0.1 Remote Crash Vulnerability Date: 06/04/10 Author: Jobert Abma Online 24 Email: j.abmaatonline24dotnl Version: R6.0.1 Tested on: linux CVE : Code : This was written for educational purpose. Use it at your own risk. Author will be not responsible for any damage. -...
CVE-2010-1274: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Emweb Wt before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to "insertions of the URL" that occur during a redirection...
CVE-2008-4383
Stack-based buffer overflow in the Agranet-Emweb embedded management web server in Alcatel OmniSwitch OS7000, OS6600, OS6800, OS6850, and OS9000 Series devices with AoS 5.1 before 5.1.6.463.R02, 5.4 before 5.4.1.429.R01, 6.1.3 before 6.1.3.965.R01, 6.1.5 before 6.1.5.595.R01, and 6.3 before...
Stack overflow
Stack-based buffer overflow in the Agranet-Emweb embedded management web server in Alcatel OmniSwitch OS7000, OS6600, OS6800, OS6850, and OS9000 Series devices with AoS 5.1 before 5.1.6.463.R02, 5.4 before 5.4.1.429.R01, 6.1.3 before 6.1.3.965.R01, 6.1.5 before 6.1.5.595.R01, and 6.3 before...
CVE-2008-4383
The CVE-2008-4383 issue affects Alcatel OmniSwitch series using the Agranet-Emweb embedded management web server (OS7000/OS6600/OS6800/OS6850/OS9000) with AoS versions: 5.1 before 5.1.6.463.R02, 5.4 before 5.4.1.429.R01, 6.1.3 before 6.1.3.965.R01, 6.1.5 before 6.1.5.595.R01, and 6.3 before 6.3.1...
CVE-2008-4383: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in the Agranet-Emweb embedded management web server in Alcatel OmniSwitch OS7000, OS6600, OS6800, OS6850, and OS9000 Series devices with AoS 5.1 before 5.1.6.463.R02, 5.4 before 5.4.1.429.R01, 6.1.3 before 6.1.3.965.R01, 6.1.5 before 6.1.5.595.R01, and 6.3 before...
Layered Defense Research Advisory: Alcatel-Lucent OmniSwitch products, Stack Buffer Overflow
================================================== Layered Defense Research Advisory 12 August 2008 ================================================== 1 Affected Product Alcatel-Lucent OmniSwitch products OS7000 OS6600 OS6800 OS6850 OS9000 ================================================== 2...
CVE-2006-0248
CVE-2006-0248 concerns Virata-EmWeb web server 6_1_0 used in Intracom JetSpeed 500/520 and Allied Data CopperJet 811 RouterPlus. The vulnerability allows remote attackers to access privileged information (e.g., user lists, configuration settings) via direct HTTP requests. The connected documents ...
CVE-2006-0248
Virata-EmWeb web server 610, as used in 1 Intracom JetSpeed 500 and 520 and 2 Allied Data Technologies CopperJet 811 RouterPlus, allows remote attackers to access privileged information, such as user lists and configuration settings, via direct HTTP requests...
Design/Logic Flaw
Virata-EmWeb web server 610, as used in 1 Intracom JetSpeed 500 and 520 and 2 Allied Data Technologies CopperJet 811 RouterPlus, allows remote attackers to access privileged information, such as user lists and configuration settings, via direct HTTP requests...
CVE-2006-0248: Undefined Security Weakness
Virata-EmWeb web server 610, as used in 1 Intracom JetSpeed 500 and 520 and 2 Allied Data Technologies CopperJet 811 RouterPlus, allows remote attackers to access privileged information, such as user lists and configuration settings, via direct HTTP requests...