3064 matches found
CVE-2007-0426
BEA WebLogic Portal 9.2, when running in a WebLogic Server clustered environment using WebLogic Portal entitlements, does not properly propagate entitlement policy changes if the changes are made on a managed server while the Administrative Server is unavailable, which might allow attackers to...
Lanifex Database of Managed Objects Access_manager.PHP远程文件包含漏洞
Lanifex Database of Managed Objects是一款基于PHP的WEB应用程序。 Lanifex Database of Managed Objects不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于'Accessmanager.PHP'脚本对用户提交的WEB参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 Lanifex Lanifex 2.3 Beta Lanifex Lanifex 2.2 无 !/usr/bin/perl use LWP::UserAgent; / +...
CVE-2006-4604: Undefined Security Weakness
PHP remote file inclusion vulnerability in LFXlib/accessmanager.php in Lanifex Database of Managed Objects DMO 2.3 Beta and earlier allows remote attackers to execute arbitrary PHP code via the incMgr parameter...
Lanifex DMO <= 2.3b (_incMgr) Remote File Include Exploit
Exploit for unknown platform in category web applications ========================================================= Lanifex DMO s...
Xtreme/Ditto News <= 1.0 (post.php) Remote File Include Vulnerability
No description provided by source. $$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$ $$ $$ Xtreme/Ditto News = v.1.0 Remote File Include Vulnerability $$ Script site: http://www.xtremescripts.com/ $$ Script site: http://www.dittoscripts.com/ $$ Dork: "News Managed by Ditto News" $$...
XtremeDitto News 1.0 - post.php Remote File Inclusion
XtremeDitto News 1.0 - post.php Remote File Inclusion $$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$ $$ $$ Xtreme/Ditto News = v.1.0 Remote File Include Vulnerability $$ Script site: http://www.xtremescripts.com/ $$ Script site: http://www.dittoscripts.com/ $$ Dork: "News Managed...
Cross site scripting
Cross-site scripting XSS vulnerability in VeriSign haydn.exe, as used in Managed PKI MPKI 6.0, allows remote attackers to inject arbitrary web script or HTML via a javascript URI in the VHTMLFILE parameter...
CVE-2006-1344
Cross-site scripting XSS vulnerability in VeriSign haydn.exe, as used in Managed PKI MPKI 6.0, allows remote attackers to inject arbitrary web script or HTML via a javascript URI in the VHTMLFILE parameter...
CVE-2006-1344
Cross-site scripting XSS vulnerability in VeriSign haydn.exe, as used in Managed PKI MPKI 6.0, allows remote attackers to inject arbitrary web script or HTML via a javascript URI in the VHTMLFILE parameter...
CVE-2006-1344
CVE-2006-1344 describes a cross-site scripting (XSS) flaw in VeriSign’s haydn.exe CGI used by MPKI 6.0. The vulnerability stems from lack of input validation in the VHTML_FILE parameter, allowing an attacker to inject arbitrary HTML/JavaScript that is returned to the user’s browser. CORE Security...
CVE-2006-1344: Undefined Security Weakness
Cross-site scripting XSS vulnerability in VeriSign haydn.exe, as used in Managed PKI MPKI 6.0, allows remote attackers to inject arbitrary web script or HTML via a javascript URI in the VHTMLFILE parameter...
NetAuctionHelp v3.0 XSS Vuln
NetAuctionHelp v3.0 XSS Vuln Vuln. dicovered by : r0t Date: 6 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/netauctionhelp-v30-xss-vuln.html vendor:http://www.netauctionhelp.com/ affected version:v3.0 and prior Product Description: NetAuctionHelp provides auction site source code...
BEA WebLogic Operator/Admin Password Disclosure Vulnerability
The remote web server is running WebLogic. BEA WebLogic Server and WebLogic Express are reported prone to a vulnerability that may result in the disclosure of Operator or Admin passwords. An attacker who has interactive access to the affected managed server, may potentially exploit this issue in ...
Altiris Deployment Server server spoofing
Mutual authentication absence and multicast based server detection allow to spoof server and obtain full control under managed network...
BEA WebLogic config.xml Operator/Admin Password Disclosure
The remote web server is running WebLogic. BEA WebLogic Server and WebLogic Express are reportedly may allow disclosure of Operator or Admin passwords. An attacker who has interactive access to the affected managed server may potentially exploit this issue in a timed attack to harvest credentials...
Hardening of Solaris OS for MGC
...
Update Rollup for Lync Server 2013 Unified Communications Managed API 4.0 Core Runtime x64 (KB3081744)
Update Rollup for Lync Server 2013 Unified Communications Managed API 4.0 Core Runtime x64 KB3081744...
Update Rollup for Unified Communications Managed API 4.0 Core Runtime x64 (KB3175339)
Update Rollup for Unified Communications Managed API 4.0 Core Runtime x64 KB3175339...