1201 matches found
CVE-2012-2274
Cross-site scripting XSS vulnerability in pivotx/ajaxhelper.php in PivotX 2.3.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the file parameter...
PT-2012-3913
Name of the Vulnerable Software and Affected Versions PivotX versions 2.3.2 and earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the file parameter in the /pivotx/ajaxhelper.php endpoint. Recommendations For PivotX versions...
CVE-2012-2274: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in pivotx/ajaxhelper.php in PivotX 2.3.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the file parameter...
CVE-2012-3399
Config/diff.php in Basilic 1.5.14 allows remote attackers to execute arbitrary commands via shell metacharacters in the file parameter...
CVE-2012-3399: Improper Input Validation
Config/diff.php in Basilic 1.5.14 allows remote attackers to execute arbitrary commands via shell metacharacters in the file parameter...
PT-2012-3585
Name of the Vulnerable Software and Affected Versions Quantum Scalar i500 tape library versions prior to i7.0.3 604G.GS00100 Dell ML6000 tape library versions prior to A20-00 590G.GS00100 Description The issue allows remote attackers to read arbitrary files via a full pathname in the file paramet...
CVE-2012-1787
Multiple cross-site scripting XSS vulnerabilities in wgarcmin.cgi in Webglimpse 2.20.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 URL, 2 FILE, or 3 DOMAIN parameters...
CVE-2012-1790
Absolute path traversal vulnerability in Webgrind 1.0 and 1.0.2 allows remote attackers to read arbitrary files via a full pathname in the file parameter to index.php...
PT-2012-3541
Name of the Vulnerable Software and Affected Versions Webgrind versions 1.0 through 1.0.2 Description The issue allows remote attackers to read arbitrary files by providing a full pathname in the file parameter to the "index.php" endpoint. Recommendations For Webgrind versions 1.0 through 1.0.2,...
PT-2012-3538
Name of the Vulnerable Software and Affected Versions Webglimpse versions 2.20.0 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via the URL, FILE, or DOMAIN parameters in the wgarcmin.cgi component. Recommendations For Webglimpse versions 2.20.0 a...
CVE-2012-1787: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in wgarcmin.cgi in Webglimpse 2.20.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 URL, 2 FILE, or 3 DOMAIN parameters...
webgrind 1.0 - 'file' Local File Inclusion
webgrind 1.0 file param Local File Inclusion Vulnerability Vendor: Joakim Nygard and Jacob Oettinger Product web page: http://code.google.com/p/webgrind Affected version: 1.0 v1.02 in trunk on github Summary: Webgrind is an Xdebug profiling web frontend in PHP5. Desc: webgrind suffers from a file...
CVE-2012-1226
Multiple directory traversal vulnerabilities in Dolibarr CMS 3.2.0 Alpha allow remote attackers to read arbitrary files and possibly execute arbitrary code via a .. dot dot in the 1 file parameter to document.php or 2 backtopage parameter in a create action to comm/action/fiche.php...
PT-2012-3038
Name of the Vulnerable Software and Affected Versions Cyberoam Central Console versions 2.00.2 Description A directory traversal issue exists in the WWWHELP Service, specifically in the js/html/wwhelp.htm file, allowing remote attackers to include and execute arbitrary local files. This is achiev...
CVE-2012-1025
CVE-2012-1025 is an absolute path traversal vulnerability in Enigma2 Webinterface, affecting versions 1.6.0–1.6.8, 1.6rc3, and 1.7.0. The issue allows a remote attacker to read arbitrary files by supplying a full pathname in the file parameter. Several sources (NVD, Red Hat entry, OpenVAS tests) ...
PT-2012-3024
Name of the Vulnerable Software and Affected Versions Enigma2 Webinterface versions 1.6.0 through 1.6.8 Enigma2 Webinterface version 1.6rc3 Enigma2 Webinterface version 1.7.0 Description The issue allows remote attackers to read arbitrary files via a full pathname in the file parameter. This is a...
CVE-2012-1025: Improper Limitation of a Pathname to a Restricted Directory
Absolute path traversal vulnerability in file in Enigma2 Webinterface 1.6.0 through 1.6.8, 1.6rc3, and 1.7.0 allows remote attackers to read arbitrary files via a full pathname in the file parameter...
PT-2012-3023
Name of the Vulnerable Software and Affected Versions Enigma2 Webinterface versions 1.5rc1 through 1.5beta4 Description The issue allows remote attackers to read arbitrary files by utilizing a .. dot dot in the file parameter. This enables access to sensitive information. Recommendations For...
CVE-2012-1024: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in file in Enigma2 Webinterface 1.5rc1 and 1.5beta4 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...
