Symantec IM Manager IMAdminReportTrendFormRun.asp SQL Injection (CVE-2010-0112)

Symantec IM Manager is a software-based proxy to secure, manage, and log IM messages for enterprise and public IM protocols. It provides real-time threat protection against IM viruses, worms, and other types of attacks delivered through IM messages. Symantec IM Manager allows the definition of...

Symantec IM Manager rdpageimlogic.aspx Multiple SQL Injections (CVE-2010-0112)

Symantec IM Manager is a software-based proxy to secure, manage, and log IM messages for enterprise and public IM protocols. It provides real-time threat protection against IM viruses, worms, and other types of attacks delivered through IM messages. Symantec IM Manager allows the definition of...

Symantec IM Manager IMAdminScheduleReport.asp SQL Injection (CVE-2010-0112)

Symantec IM Manager is a software-based proxy to secure, manage, and log IM messages for enterprise and public IM protocols. It provides real-time threat protection against IM viruses, worms, and other types of attacks delivered through IM messages. A SQL injection vulnerability has been reported...

Symantec IM Manager LoggedInUsers.lgx Definition File SQL Injections (CVE-2010-0112)

Symantec IM Manager is a software-based proxy to secure, manage, and log IM messages for enterprise and public IM protocols. It provides real-time threat protection against IM viruses, worms, and other types of attacks delivered through IM messages. An SQL injection vulnerability has been reporte...

Symantec IM Manager < 8.4.16 Multiple SQL Injections (SYM10-010)

The version of Symantec IM Manager installed on the remote Windows host is earlier than 8.4.16. Such versions are reportedly affected by multiple SQL injection vulnerabilities in its administration console. An unauthenticated, remote attacker may be able to exploit these issues to compromise the...

Symantec IM Manager whereClause Parameter SQL Injection (SYM10-010)

The version of Symantec IM Manager installed on the remote Windows host fails to sanitize input to the 'whereClause' parameter of the 'rdpageimlogic.aspx' script before using it in the 'LoggedInUsers.lgx' definition file to construct database queries. An unauthenticated attacker may be able to...

Symantec IM Manager多个SQL注入漏洞

Bugtraq ID: 44299 Symantec IM Manager为企业IM网络提供认证支持，对企业即时信息通信进行无缝管理，并实行安全保障、日志和存档。 Symantec IM Manager存在多个输入验证问题，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息或操作数据库。 -IM Manager中的管理接口存在缺陷。安装的IIS扩展主页面需要验证，不过许多页面可以直接访问，IMAdminScheduleReport.asp...

CVE-2010-0112

Multiple SQL injection vulnerabilities in the Administrative Interface in the IIS extension in Symantec IM Manager before 8.4.16 allow remote attackers to execute arbitrary SQL commands via 1 the rdReport parameter to rdpageimlogic.aspx, related to the sGetDefinition function in rdServer.dll, and...

Sql injection

Multiple SQL injection vulnerabilities in the Administrative Interface in the IIS extension in Symantec IM Manager before 8.4.16 allow remote attackers to execute arbitrary SQL commands via 1 the rdReport parameter to rdpageimlogic.aspx, related to the sGetDefinition function in rdServer.dll, and...

CVE-2010-0112

Multiple SQL injection vulnerabilities in the Administrative Interface in the IIS extension in Symantec IM Manager before 8.4.16 allow remote attackers to execute arbitrary SQL commands via 1 the rdReport parameter to rdpageimlogic.aspx, related to the sGetDefinition function in rdServer.dll, and...

CVE-2010-0112

CVE-2010-0112 — Symantec IM Manager before version 8.4.16 is affected by multiple SQL injection vulnerabilities in the Administrative Interface (IIS extension). The issues allow remote attackers to inject SQL via numerous parameters (e.g., rdReport, DetailReportGroup, SummaryReportGroup, LoggedIn...

Symantec IM Manager Administrative Interface IMAdminReportTrendFormRun.asp SQL Injection Vulnerability

This vulnerability allows remote attackers to inject arbitrary SQL into the packaged database on vulnerable installations of Symantec IM Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Administrative interface installed with IM Manager...

Symantec IM Manager Administrative Interface DetailReportGroup.lgx Definition File SQL Injection Vulnerabilities

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Symantec IM Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the rdPageImlogic.aspx page which is exposed through an IIS extension on the defau...

Symantec IM Manager Administrative Interface rdpageimlogic.aspx SQL Injection Vulnerabilities

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Symantec IM Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the rdpageimlogic.aspx page which is exposed through an IIS extension on the defau...

Symantec IM Manager Administrative Interface LoggedInUsers.lgx Definition File SQL Injection Vulnerabilities

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Symantec IM Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the rdpageimlogic.aspx and rdPage.aspx pages which is exposed through an IIS...

Symantec IM Manager Administrative Interface SummaryReportGroup.lgx Definition File SQL Injection Vulnerabilities

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Symantec IM Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the rdpageimlogic.aspx page which is exposed through an IIS extension on the defau...

Symantec IM Manager Administrative Interface IMAdminScheduleReport.asp SQL Injection Vulnerability

This vulnerability allows remote attackers to inject arbitrary SQL into the packaged database on vulnerable installations of Symantec IM Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Administrative interface installed with IM Manager...

Symantec IM Manager rdServer.dll sGetDefinition SQL Injection Vulnerability

This vulnerability allows remote attackers to inject arbitrary SQL into the backend database on vulnerable installations of Symantec IM Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the IM Manager interface exposed by the web server which...

Symantec IM Manager Detection

Symantec IM Manager, used to manage instant messaging traffic, is installed on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid45017; scriptversion"1.10"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/10";...

Symantec IM Manager 8.x < 8.3.14 (SYM10-005 and SYM10-006)

A version of Symantec IM Manager 8.x earlier than 8.3.14 is installed on the remote Windows host. Such versions may be affected by one or both of the following vulnerabilities : - An integer overflow vulnerability in the third-party Autonomy KeyView module can be triggered when parsing a speciall...