CVE-2007-5796: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the management console in Blue Coat ProxySG before 4.2.6.1, and 5.x before 5.2.2.5, allows remote attackers to inject arbitrary web script or HTML by modifying the URL that is used for loading Certificate Revocation Lists...

Blue Coat ProxySG Management Console - URI Handler Multiple Cross-Site Scripting Vulnerabilities

Blue Coat ProxySG Management Console - URI Handler Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/26286/info Blue Coat ProxySG Management Console is prone to two cross-site scripting vulnerabilities because the application fails to properly sanitize...

CVE-2003-1341

The default installation of Trend Micro OfficeScan 3.0 through 3.54 and 5.x allows remote attackers to bypass authentication from cgiChkMasterPasswd.exe and gain access to the web management console via a direct request to cgiMasterPwd.exe...

CVE-2003-1341

The CVE-2003-1341 entry concerns Trend Micro OfficeScan web management console authentication bypass. Affected products are OfficeScan 3.0–3.54 and 5.x, where an attacker can bypass authentication and gain access to the web console by issuing a direct request to cgiMasterPwd.exe after bypassing c...

CVE-2003-1341: Undefined Security Weakness

The default installation of Trend Micro OfficeScan 3.0 through 3.54 and 5.x allows remote attackers to bypass authentication from cgiChkMasterPasswd.exe and gain access to the web management console via a direct request to cgiMasterPwd.exe...

iDefense Security Advisory 07.16.07: Trend Micro OfficeScan Management Console Authorization Bypass Vulnerability

Trend Micro OfficeScan Management Console Authorization Bypass Vulnerability iDefense Security Advisory 07.16.07 http://labs.idefense.com/intelligence/vulnerabilities/ Jul 16, 2007 I. BACKGROUND Trend Micro OfficeScan is a centrally managed AntiVirus solution that allows administrators to manage...

asteridex-exec.txt

Hoku Security Vulnerability Advisory Title: AsteriDex remote command execution Vendor URL: http://bestof.nerdvittles.com/applications/asteridex/ Type: Command injection / remote code execution Vulnerable versions: = 3.0 Risk factor: High Popularity: Low Author: Carl Livitt Contact: [email protected]...

Trend Micro OfficeScan Server CGI Modules Multiple Vulnerabilities

The remote host appears to be running Trend Micro OfficeScan Server or Client Server Messaging Security for SMB. The version of OfficeScan Server or Client Server Messaging Security for SMB installed on the remote host reportedly contains a buffer overflow issue that could allow a remote attacker...

CVE-2007-3455: Undefined Security Weakness

cgiChkMasterPwd.exe before 8.0.0.142 in Trend Micro OfficeScan Corporate Edition 8.0 allows remote attackers to bypass the password requirement and gain access to the Management Console via an empty hash and empty encrypted password string, related to "stored decrypted user logon information."...

Authentication flaw

Unspecified vulnerability in the authentication mechanism in Solaris Management Console SMC on Sun Solaris 8 through 10 before 20070605 allows remote authenticated users to execute arbitrary code via unspecified vectors, related to the WBEM server...

Code injection

Unspecified vulnerability in the logging mechanism in Solaris Management Console SMC on Sun Solaris 8 through 10 before 20070605 allows remote attackers to execute arbitrary code via unspecified vectors, related to the WBEM server...

CVE-2007-3093

Unspecified vulnerability in the logging mechanism in Solaris Management Console SMC on Sun Solaris 8 through 10 before 20070605 allows remote attackers to execute arbitrary code via unspecified vectors, related to the WBEM server...

CVE-2007-3093

Unspecified vulnerability in the logging mechanism in Solaris Management Console SMC on Sun Solaris 8 through 10 before 20070605 allows remote attackers to execute arbitrary code via unspecified vectors, related to the WBEM server...

CVE-2007-3094

Unspecified vulnerability in the authentication mechanism in Solaris Management Console SMC on Sun Solaris 8 through 10 before 20070605 allows remote authenticated users to execute arbitrary code via unspecified vectors, related to the WBEM server...

CVE-2007-3093

CVE-2007-3093 refers to an unspecified vulnerability in the Solaris Management Console (SMC) logging mechanism on Solaris 8–10 (before 2007-06-05) that allows remote code execution via unspecified vectors related to the WBEM server. The NVD entry lists a HIGH base score (CVSSv2 10.0) with network...

CVE-2007-3093: Undefined Security Weakness

Unspecified vulnerability in the logging mechanism in Solaris Management Console SMC on Sun Solaris 8 through 10 before 20070605 allows remote attackers to execute arbitrary code via unspecified vectors, related to the WBEM server...

CVE-2007-3094: Undefined Security Weakness

Unspecified vulnerability in the authentication mechanism in Solaris Management Console SMC on Sun Solaris 8 through 10 before 20070605 allows remote authenticated users to execute arbitrary code via unspecified vectors, related to the WBEM server...

Ignite Realtime Openfire未明特权提升漏洞

Ignite Realtime Openfire是一款实时协作服务程序。 Ignite Realtime Openfire存在多个问题，远程攻击者可以利用漏洞提升特权。 漏洞允许恶意用户通过内置的管理控制台上传代码到Openfire而执行任意指令。目前没有详细漏洞细节提供。 Ignite Realtime Openfire 3.3 升级程序： Ignite Realtime Openfire 3.3 Ignite Realtime openfire-3.3.1-1.i386.rpm...

Directory traversal

Directory traversal vulnerability in /console in the Management Console in webMethods Glue 6.5.1 and earlier allows remote attackers to read arbitrary system files via a .. dot dot in the resource parameter...

CVE-2007-2048

Directory traversal vulnerability in /console in the Management Console in webMethods Glue 6.5.1 and earlier allows remote attackers to read arbitrary system files via a .. dot dot in the resource parameter...