PT-2017-16818

Name of the Vulnerable Software and Affected Versions InterSect Alliance SNARE Epilog for UNIX version 1.5 Description A cross-site scripting issue allows remote authenticated users to inject arbitrary web script or HTML via the str log name parameter in a "Web Admin Portal Log Configuration Add"...

CVE-2017-5998: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in InterSect Alliance SNARE Epilog for UNIX version 1.5 allows remote authenticated users to inject arbitrary web script or HTML via the strlogname parameter in a "Web Admin Portal Log Configuration Add" action...

Multiple Parallelus Themes - Reflected Cross-Site Scripting (XSS)

Multiple themes from the Parallelus vendor were affected by reflected Cross-Site Scripting issues: Unite closed - https://themeforest.net/item/unite-wordpress-business-magazine-theme/90959 / http://para.llel.us/themes/unite-wp/ Salutation -...

WordPress Intersect Theme - XSS

This WordPress theme is prone to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary script or HTML. Solution Update the theme...

Some WordPress Themes, Thousands of Sites Open to XSS Vulnerability

A number of WordPress themes being distributed by the developer Parallelus are vulnerable to cross-site scripting XSS attacks, reports said. Themes, bits of PHP and HTML code that alter the look and functionality of sites, are usually installed via WordPress’ dashboard tool or by FTP. According t...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the web management interface in InterSect Alliance Snare Agent 3.2.3 and earlier on Solaris, Snare Agent 3.1.7 and earlier on Windows, Snare Agent 1.5.0 and earlier on Linux and AIX, Snare Agent 1.4 and earlier on IRIX, Snare Epilog 1.5....

KLA10331 SB vulnerability in Snare

A CSRF vulnerability was found in Snare. By exploiting this vulnerability malicious users can hijack administrator auth. This vulnerability can be exploited remotely. Original advisories - Exploitation Public exploits exist for this vulnerability. Related products Snare-for-Windows...

CVE-2010-2594

The CVE-2010-2594 issue affects InterSect Alliance Snare Agent and Epilog products across Solaris, Windows, Linux/AIX, IRIX and UNIX variants. Description and connected records confirm multiple CSRF vulnerabilities in the web management interface that allow remote attackers to hijack administrato...

CVE-2010-2594

Multiple cross-site request forgery CSRF vulnerabilities in the web management interface in InterSect Alliance Snare Agent 3.2.3 and earlier on Solaris, Snare Agent 3.1.7 and earlier on Windows, Snare Agent 1.5.0 and earlier on Linux and AIX, Snare Agent 1.4 and earlier on IRIX, Snare Epilog 1.5....

CVE-2010-2594: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the web management interface in InterSect Alliance Snare Agent 3.2.3 and earlier on Solaris, Snare Agent 3.1.7 and earlier on Windows, Snare Agent 1.5.0 and earlier on Linux and AIX, Snare Agent 1.4 and earlier on IRIX, Snare Epilog 1.5....