CVE-2011-2079

MediaCAST 8 and earlier allows remote attackers to have an unspecified impact via a 1 CPRIGHTSOURCE or 2 bdclientInventive cookie to the default URI under inventivex/managetraining/, related to an "XML injection" issue...

PT-2011-3575

Name of the Vulnerable Software and Affected Versions MediaCAST versions 8 and earlier Description The issue allows remote attackers to have an unspecified impact via a 1 CP RIGHTSOURCE or 2 bdclient Inventive cookie to the default URI under "inventivex/managetraining/", related to an "XML...

PT-2011-3576

Name of the Vulnerable Software and Affected Versions MediaCAST versions 8 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via a CP ENLARGESTYLE cookie to the default URI under inventivex/managetraining/ or unspecified input to...