Code injection

Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to execute arbitrary commands via shell metacharacters to certain /goform/ pages...

Design/Logic Flaw

Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to read passwords via a direct request to the x.asp page...

CVE-2016-10315

Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to conduct Open Redirect attacks via the submit-url parameter to certain /goform/ pages...

CVE-2016-10312

Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to execute arbitrary commands via shell metacharacters to certain /goform/ pages...

CVE-2016-10314

Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to read passwords via a direct request to the x.asp page...

CVE-2016-10316

CVE-2016-10316 affects Jensen of Scandinavia Air:Link devices: AL3G (2.23m Rev. 3), AL5000AC (1.13), and AL59300 (1.04 Rev. 4). The vulnerability is an Open Redirect in the /goform/formLogout endpoint, triggered by manipulating the return-url parameter to redirect users to an arbitrary URL. Root ...

CVE-2016-10315

CVE-2016-10315 involves Jensen of Scandinavia Air:Link routers (AL3G 2.23m Rev.3; AL5000AC 1.13; AL59300 1.04 Rev.4). The vulnerability allows remote attackers to perform Open Redirects through the submit-url parameter on certain /goform/* pages. The underlying issue is an input handling flaw tha...

CVE-2016-10313

CVE-2016-10313 affects Jensen of Scandinavia Air:Link devices: AL3G (2.23m Rev 3), AL5000AC (1.13), and AL59300 (1.04 Rev 4). The issue is a Cross-Site Request Forgery vulnerability exploitable via certain /goform/* pages, allowing remote attackers to perform actions in the context of an authenti...

CVE-2016-10312

Affected devices : Jensen of Scandinavia Air:Link family — AL3G (2.23m Rev.3), AL5000AC (v1.13), AL59300 (v1.04 Rev.4). Vulnerability : remote attackers can execute arbitrary commands by injecting shell metacharacters into certain /goform/* pages. This is a command-injection style issue impacting...

CVE-2016-10314

The CVE-2016-10314 entry affects Jensen of ScandinaviaAir:Link devices: AL3G (2.23m, Rev. 3), AL5000AC (1.13), and AL59300 (1.04, Rev. 4). The issue is an information-disclosure vulnerability allowing remote attackers to read passwords via a direct request to the x.asp page. The Red Hat/NVD entri...

CVE-2016-10316

Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to conduct Open Redirect attacks via the return-url parameter to /goform/formLogout...

CVE-2016-10315

Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to conduct Open Redirect attacks via the submit-url parameter to certain /goform/ pages...

CVE-2016-10313

Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to conduct CSRF attacks via certain /goform/ pages...

CVE-2016-10273

Multiple stack buffer overflow vulnerabilities in Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to execute arbitrary code or crash the web service via the 1...

Watchguard XCS - FixCorruptMail Privilege Escalation (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit4 'Watchguard XCS FixCorruptMail Local Privilege Escalation', 'Description' = %q This module exploits a vulnerability in the Watchguard...

Watchguard XCS FixCorruptMail Local Privilege Escalation

This module exploits a vulnerability in the Watchguard XCS 'FixCorruptMail' script called by root's crontab which can be exploited to run a command as root within 3 minutes. This module requires Metasploit: https://metasploit.com/download Current source:...

Vulnerabilities of the Red Hat Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The kernel-jensen-2.2.19 package of the Red Hat Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Vulnerabilities in the Debian GNU/Linux operating system that allow a local malicious individual to compromise the confidentiality, integrity, and accessibility of protected information

The kernel-image-2.2.22-jensen package of the Debian GNU/Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited by local...

CVE-2006-6037

The CVE-2006-6037 entry describes multiple XSS vulnerabilities in Dan Jensen Travelsized CMS 0.4.1 and earlier, exploitable via index.php parameters (page, page_id, language). The underlying issue is reflected in the provided description; no exploitation details or exact root cause are given beyo...

CVE-2006-5182

PHP remote file inclusion vulnerability in frontpage.php in Dan Jensen Travelsized CMS 0.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the setupfolder parameter...