EUVD-2012-6406

Malware in sbrugna...

EUVD-2012-6407

Malware in sbrugna...

FreeNAC 3.02 - SQL Injection and XSS Vulnerabilties

No description provided by source...

FreeNAC Multiple XSS and SQL Injection Vulnerabilities

FreeNAC is prone to multiple cross site scripting, HTML injection and SQL injection vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2012-6559

Multiple cross-site scripting XSS vulnerabilities in FreeNAC 3.02 allow remote attackers to inject arbitrary web script or HTML via the 1 comment, 2 mac, 3 graphtype, 4 name, or 5 type parameter to stats.php; or 6 comment parameter to deviceadd.php...

CVE-2012-6560

SQL injection vulnerability in deviceadd.php in FreeNAC 3.02 allows remote attackers to execute arbitrary SQL commands via the status parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in FreeNAC 3.02 allow remote attackers to inject arbitrary web script or HTML via the 1 comment, 2 mac, 3 graphtype, 4 name, or 5 type parameter to stats.php; or 6 comment parameter to deviceadd.php...

Sql injection

SQL injection vulnerability in deviceadd.php in FreeNAC 3.02 allows remote attackers to execute arbitrary SQL commands via the status parameter...

CVE-2012-6560

SQL injection vulnerability in deviceadd.php in FreeNAC 3.02 allows remote attackers to execute arbitrary SQL commands via the status parameter...

CVE-2012-6560

Summary: CVE-2012-6560 is a SQL injection in FreeNAC 3.02, specifically in deviceadd.php via the status parameter. The OpenVAS entry also notes additional vulnerabilities in FreeNAC (multiple XSS/HTML/SQL injection). The NVD/NVD-derived descriptions confirm the SQL injection flaw exists in FreeNA...

CVE-2012-6559

CVE-2012-6559 impacts FreeNAC 3.02 with multiple cross-site scripting (XSS) vulnerabilities, enabling remote attackers to inject scripts/HTML via parameters to stats.php (comment, mac, graphtype, name, type) or deviceadd.php (comment). OpenVAS notes additional SQL injection vectors, expanding the...

CVE-2012-6559

Multiple cross-site scripting XSS vulnerabilities in FreeNAC 3.02 allow remote attackers to inject arbitrary web script or HTML via the 1 comment, 2 mac, 3 graphtype, 4 name, or 5 type parameter to stats.php; or 6 comment parameter to deviceadd.php...

CVE-2012-6559: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in FreeNAC 3.02 allow remote attackers to inject arbitrary web script or HTML via the 1 comment, 2 mac, 3 graphtype, 4 name, or 5 type parameter to stats.php; or 6 comment parameter to deviceadd.php...

PT-2013-2013

Name of the Vulnerable Software and Affected Versions FreeNAC version 3.02 Description The issue allows remote attackers to inject arbitrary web script or HTML via specific parameters, including the comment, mac, graphtype, name, or type parameter to "stats.php", or the comment parameter to...

PT-2013-2014

Name of the Vulnerable Software and Affected Versions FreeNAC version 3.02 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands via the status parameter in the "deviceadd.php" file. Recommendations For FreeNAC version 3.02, consider restricting access to the...

CVE-2012-6560: Improper Input Validation

SQL injection vulnerability in deviceadd.php in FreeNAC 3.02 allows remote attackers to execute arbitrary SQL commands via the status parameter...

FreeNAC v3. 0 2 SQL injection and XSS flaws and fixes-vulnerability warning-the black bar safety net

FreeNAC version 3.02 SQL Injection and XSS Vulnerabilties Author: Blake Software address: http://sourceforge.net/project/showfiles.php?groupid=170004 Affected version: 3.02 Test system: Ubuntu 8.04 freenac version 3.02 vmware appliance FreeNAC FreeNAC provides Virtual LAN assignment, LAN access...

FreeNAC 3.02 - SQL Injection Cross-Site Scripting

FreeNAC 3.02 - SQL Injection Cross-Site Scripting FreeNAC version 3.02 SQL Injection and XSS Vulnerabilties Date: May 19, 2012 Author: Blake Software Link: http://sourceforge.net/project/showfiles.php?groupid=170004 Version: 3.02 Tested on: Ubuntu 8.04 freenac version 3.02 vmware appliance FreeNA...

FreeNAC version 3.02 SQL Injection / XSS Vulnerabilties

Exploit for php platform in category web applications FreeNAC version 3.02 SQL Injection and XSS Vulnerabilties Date: May 19, 2012 Author: Blake Software Link: http://sourceforge.net/project/showfiles.php?groupid=170004 Version: 3.02 Tested on: Ubuntu 8.04 freenac version 3.02 vmware appliance...

FreeNAC 3.02 - SQL Injection / Cross-Site Scripting

FreeNAC version 3.02 SQL Injection and XSS Vulnerabilties Date: May 19, 2012 Author: Blake Software Link: http://sourceforge.net/project/showfiles.php?groupid=170004 Version: 3.02 Tested on: Ubuntu 8.04 freenac version 3.02 vmware appliance FreeNAC FreeNAC provides Virtual LAN assignment, LAN...