Symantec IM Manager <= 8.4.17 Multiple Vulnerabilities

Symantec IM Manager is prone to multiple vulnerabilities. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...

Low severity flaw in various applications including KSSL, Rekonq, Arora, Psi IM

I recently discovered that various Qt applications including KSSL the KDE class library responsible for SSL negotiation, Rekonq, Arora and Psi IM are vulnerable to UI spoofing due to their use of QLabel objects to render externally controlled security critical information. The primary area of...

Symantec IM Manager < 8.4.18 Multiple Vulnerabilities (SYM11-012)

The version of Symantec IM Manager running on the remote host is earlier than 8.4.18. Such versions are affected by the following vulnerabilities in the management console : - Multiple XSS. CVE-2011-0552 - An unspecified SQL injection. CVE-2011-0553 - An unspecified code injection. CVE-2011-0554 ...

CVE-2011-0553

SQL injection vulnerability in the management console in Symantec IM Manager before 8.4.18 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2011-0552

Multiple cross-site scripting XSS vulnerabilities in the management console in Symantec IM Manager before 8.4.18 allow remote attackers to inject arbitrary web script or HTML via the 1 refreshRateSetting parameter to IMManager/Admin/IMAdminSystemDashboard.asp, the 2 nav or 3 menuitem parameter to...

Sql injection

SQL injection vulnerability in the management console in Symantec IM Manager before 8.4.18 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Code injection

The management console in Symantec IM Manager before 8.4.18 allows remote attackers to execute arbitrary code via unspecified vectors, related to a "code injection issue."...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the management console in Symantec IM Manager before 8.4.18 allow remote attackers to inject arbitrary web script or HTML via the 1 refreshRateSetting parameter to IMManager/Admin/IMAdminSystemDashboard.asp, the 2 nav or 3 menuitem parameter to...

CVE-2011-0554

Symantec IM Manager (web console) is affected by CVE-2011-0554. The vulnerability exists in the management console/web interface and stems from improper validation of HTTP parameters (rdProcess), allowing remote attackers to execute arbitrary code. Exploitation can occur via crafted requests sent...

CVE-2011-0553

SQL injection vulnerability in the management console in Symantec IM Manager before 8.4.18 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2011-0554

The management console in Symantec IM Manager before 8.4.18 allows remote attackers to execute arbitrary code via unspecified vectors, related to a "code injection issue."...

CVE-2011-0553

The CVE-2011-0553 entry concerns Symantec IM Manager: an SQL injection in the management console (IMAdminLDAPConfig.asp) due to insufficient input validation. A remote attacker could exploit the flaw to execute arbitrary SQL on the underlying database (some sources note authentication is required...

CVE-2011-0552

CVE-2011-0552 affects Symantec IM Manager

CVE-2011-0552

Multiple cross-site scripting XSS vulnerabilities in the management console in Symantec IM Manager before 8.4.18 allow remote attackers to inject arbitrary web script or HTML via the 1 refreshRateSetting parameter to IMManager/Admin/IMAdminSystemDashboard.asp, the 2 nav or 3 menuitem parameter to...

Symantec IM Manager < 8.4.18 Multiple Vulnerabilities (SYM11-012)

Binary data 6031.prm...

Symantec IM Manager Administrator Console Multiple Issues

SUMMARY Symantec IM Manager is vulnerable to Code Injection, Cross-Site Scripting and SQL Injection. Successful exploitation of these vulnerabilities could result in injection/execution of arbitrary code in the context of the browser or the application. AFFECTED PRODUCTS Product | Version |...

Barracuda IMFirewall 620 - Multiple Web Vulnerabilities

Document Title: =============== Barracuda IMFirewall 620 - Multiple Web Vulnerabilities References Source: ==================== Barracuda IM Firewall 620 - Model Firmware v4.2.01.004 & older versions Please view how to explain an advisory on the half way = http://www.securityfocus.com/bid/37248...

Persistent XSS vulnerability in eBuddy Web Messenger

Persistent XSS vulnerability in eBuddy Web Messenger A team member from Virtual Luminous Security, Russian Federation, has discovered a persistent XSS vulnerability in eBuddy the biggest web IM solution in the world by transmitting messages with embedded encoded javascript code. In-depth detail...

Insomnia : ISVA-110822.1 - Pidgin IM Insecure URL Handling Remote Code Execution

Insomnia Security Vulnerability Advisory: ISVA-110822.1 Name: Pidgin IM Insecure URL Handling Remote Code Execution Reported: 21 July 2011 Vendor Link: http://www.pidgin.im Affected Products: Pidgin Instant Messaging Client = 2.9.0 Original Advisory:...

VVMessenger v1.0.4170x.x - Denial of Service Vulnerabilities

Document Title: =============== VVMessenger v1.0.4170x.x - Denial of Service Vulnerabilities Release Date: ============= 2011-08-03 Vulnerability Laboratory ID VL-ID: ==================================== 120 Product & Service Introduction: =============================== V&V messenger is an insta...