CVE-2014-5122

Open redirect vulnerability in ESRI ArcGIS for Server 10.1.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via an unspecified parameter, related to login...

CVE-2014-5121

Multiple cross-site scripting XSS vulnerabilities in ESRI ArcGIS for Server 10.1.1 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters...

Open redirect

Open redirect vulnerability in ESRI ArcGIS for Server 10.1.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via an unspecified parameter, related to login...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ESRI ArcGIS for Server 10.1.1 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters...

CVE-2014-5122

Open redirect vulnerability in ESRI ArcGIS for Server 10.1.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via an unspecified parameter, related to login...

CVE-2014-5122

CVE-2014-5122 is an Open Redirect vulnerability in ESRI ArcGIS for Server 10.1.1. A crafted login URL can redirect the user’s browser to an attacker-controlled site via an unspecified parameter, enabling phishing-like redirections. The vulnerability is documented in the ArcGIS for Server disclosu...

CVE-2014-5121

Multiple cross-site scripting XSS vulnerabilities in ESRI ArcGIS for Server 10.1.1 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters...

CVE-2014-5121

ArcGIS for Server 10.1.1 is affected by CVE-2014-5121: multiple reflected XSS vulnerabilities caused by unsanitized input in unspecified parameters. No explicit exploit details or fixed version are provided in the connected docs; one source (PT-2014-6294) mentions updating to a version with a fix...

ESRI ArcGIS 10.0.x / ArcMap 9 - Arbitrary Code Execution

No description provided by source. ===== TITLE ===== ESRI ArcMap Arbitrary Code Execution Via Crafted Map File ============ Description: ============ Opening a specially crafted mxd file will execute arbitrary code without prompting and without a crash of the application. This is due to a flaw in...

ESRI ArcGIS未明SQL注入漏洞

CVE ID:CVE-2013-7232 ArcGIS for Server软件平台让用户能够通过网络创建，管理和分发GIS服务，并以服务的形式支撑桌面软件应用，移动终端应用和网络地图应用等。 ArcGIS for Server存在未明SQL注入漏洞，允许远程攻击者利用漏洞提交特制的SQL查询，可操作或获取数据库数据。 漏洞与地图的输入有关。 0 ESRI ArcGIS for Server 10.2 厂商补丁： ESRI ----- 用户可参考如下厂商提供的安全公告获得补丁信息：...

ESRI ArcGIS未明跨站脚本漏洞

CVE ID:CVE-2013-7231 ArcGIS for Server软件平台让用户能够通过网络创建，管理和分发GIS服务，并以服务的形式支撑桌面软件应用，移动终端应用和网络地图应用等。 ArcGIS for Server移动内容服务器Mobile Content Server存在未明跨站脚本漏洞，允许通过验证的远程攻击者利用漏洞注入恶意脚本或HTML代码，当恶意数据被查看时可获取敏感信息或者劫持用户会话。 0 ESRI ArcGIS for Server 10.1 ESRI ArcGIS for Server 10.2 厂商补丁： ESRI -----...

CVE-2013-7232

SQL injection vulnerability in ESRI ArcGIS for Server through 10.2 allows remote attackers to execute arbitrary SQL commands via unspecified input to the map or feature service...

CVE-2013-7231

Cross-site scripting XSS vulnerability in the Mobile Content Server in ESRI ArcGIS for Server 10.1 and 10.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2013-5222...

CVE-2013-5222

Multiple cross-site scripting XSS vulnerabilities in ESRI ArcGIS for Server 10.1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ESRI ArcGIS for Server 10.1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the Mobile Content Server in ESRI ArcGIS for Server 10.1 and 10.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2013-5222...

Sql injection

SQL injection vulnerability in ESRI ArcGIS for Server through 10.2 allows remote attackers to execute arbitrary SQL commands via unspecified input to the map or feature service...

CVE-2013-7232

SQL injection vulnerability in ESRI ArcGIS for Server through 10.2 allows remote attackers to execute arbitrary SQL commands via unspecified input to the map or feature service...

CVE-2013-7232

Summary: CVE-2013-7232 is an SQL injection vulnerability in ESRI ArcGIS for Server up to version 10.2. The flaw allows remote attackers to execute arbitrary SQL commands via input to the map or feature service. Root cause involves unsanitized input being used in SQL queries exposed by the map/fea...

CVE-2013-5222

CVE-2013-5222 affects ESRI ArcGIS for Server 10.1. Multiple XSS vulnerabilities allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. The vulnerability is documented in the NVD entry for ArcGIS for Server 10.1 with a low base score (3.5) and no details o...