CVE-2008-1157

CiscoWorks Internetwork Performance Monitor (IPM) 2.6 for Solaris and Windows contains a vulnerability where a process binds a command shell to a randomly chosen TCP port. Remote, unauthenticated users can connect to the open port and execute arbitrary commands (on Solaris as casuser, on Windows ...

CVE-2008-1157

Cisco CiscoWorks Internetwork Performance Monitor IPM 2.6 creates a process that executes a command shell and listens on a randomly chosen TCP port, which allows remote attackers to execute arbitrary commands...

CVE-2006-5924

The CVE-2006-5924 entry documents a cross-site scripting (XSS) vulnerability in Efficient IP iPmanager (IPm) 2.3, exploitable through the errmsg parameter of index.php. The underlying issue is an reflected/scriptable input being echoed in the web page, allowing remote attackers to inject arbitrar...