Reflected Cross-Site Scripting (XSS) in iTop

High-Tech Bridge Security Research Lab discovered vulnerability in iTop, which can be exploited to perform Cross-Site Scripting XSS attacks against web application users. iTop is a critical application, which is used to cover the entire set of ITIL processes. Successful attack on this web...

TeemIp - IP Address Management Solution

All network administrators do recognize how important it is to have a well managed IP space: a comprehensive and up to date inventory of all subnets and IPs used in a network as well as clear and simple processes to request, change or release IPs are underlying key factors for a trouble free...

CVE-2013-0805

Multiple cross-site scripting XSS vulnerabilities in the search feature in iTop aka IT Operations Portal 2.0, 1.2.1, 1.2, and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 text parameter to pages/UI.php or 2 expression parameter to pages/runquery.php. NOTE: some ...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the search feature in iTop aka IT Operations Portal 2.0, 1.2.1, 1.2, and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 text parameter to pages/UI.php or 2 expression parameter to pages/runquery.php. NOTE: some ...

CVE-2013-0805

Multiple cross-site scripting XSS vulnerabilities in the search feature in iTop aka IT Operations Portal 2.0, 1.2.1, 1.2, and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 text parameter to pages/UI.php or 2 expression parameter to pages/runquery.php. NOTE: some ...

CVE-2013-0805

CVE-2013-0805 covers multiple cross-site scripting (XSS) flaws in the iTop (IT Operations Portal) search feature. The vulnerabilities allow remote attackers to inject arbitrary HTML/script via the text parameter to pages/UI.php or the expression parameter to pages/run_query.php. Affected versions...

CVE-2013-0805 / CSNC-2013-001

COMPASS SECURITY ADVISORY http://www.csnc.ch/ CVE ID : CVE-2013-0805 CSNC ID: CSNC-2013-001 Product: iTop Vendor: Combodo Subject: Cross-site Scripting - XSS Risk: High Effect: Remotely exploitable Author: Stephan Rickauer stephan.rickauer at csnc.ch Date: January 23rd 2013 Introduction:...

TC-SA-2011-02: Multiple web-vulnerabilities in iTop version 1.1.181

TC-SA-2011-02: Multiple web-vulnerabilities in iTop version 1.1.181 Published: 2011/11/16 Version 1.0 Affected products: iTop version 1.1.181, 1.2.0-RC-282 maybe earlier versions as well http://sourceforge.net/projects/itop/ References: CVE-2011-4275 - Multiple web-vulnerabilities in iTop...

CVE-2011-4275

Multiple cross-site scripting XSS vulnerabilities in iTop aka IT Operations Portal 1.1.181 and 1.2.0-RC-282 allow remote attackers to inject arbitrary web script or HTML via 1 a crafted company name, 2 a crafted database server name, 3 a crafted CSV file, 4 a crafted copy-and-paste action, 5 the...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in iTop aka IT Operations Portal 1.1.181 and 1.2.0-RC-282 allow remote attackers to inject arbitrary web script or HTML via 1 a crafted company name, 2 a crafted database server name, 3 a crafted CSV file, 4 a crafted copy-and-paste action, 5 the...

CVE-2011-4275

CVE-2011-4275 affects iTop (IT Operations Portal) 1.1.181 and 1.2.0-RC-282, with multiple stored and reflected XSS vectors. The root cause is insufficient input sanitisation across numerous fields and parameters (e.g., company name, database server name, CSV import, copy‑paste actions, auth_user ...

CVE-2011-4275

Multiple cross-site scripting XSS vulnerabilities in iTop aka IT Operations Portal 1.1.181 and 1.2.0-RC-282 allow remote attackers to inject arbitrary web script or HTML via 1 a crafted company name, 2 a crafted database server name, 3 a crafted CSV file, 4 a crafted copy-and-paste action, 5 the...

iTop 1.1.181 Cross Site Scripting

TC-SA-2011-02: Multiple web-vulnerabilities in iTop version 1.1.181 Published: 2011/11/16 Version 1.0 Affected products: iTop version 1.1.181, 1.2.0-RC-282 maybe earlier versions as well http://sourceforge.net/projects/itop/ References: CVE-2011-4275 - Multiple web-vulnerabilities in iTop...

RJ-iTop Network Vulnerability Scanner SQL Injection

RJ-iTop Network Vulnerability Scanner System Multiple SQL Injection Vulnerabilities Vulnerable: v3.0.7.x Vendor: www.rj-itop.com Category: Input Validation Error Impact: SQL injection Details: ========= Multiple SQL Injection Vulnerabilities has been found in DRJ-iTop Network Vulnerability Scanne...