1209 matches found
Mitel Audio and Web Conferencing 4.4.3.0 - Multiple Cross-Site Scripting Vulnerabilities
Mitel Audio and Web Conferencing 4.4.3.0 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/47874/info Mitel Audio and Web Conferencing is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An...
Mitel Audio and Web Conferencing 4.4.3.0 - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/47874/info Mitel Audio and Web Conferencing is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to execute arbitrary script code in the browser of an...
Mitel Audio and Web Conferencing - Command Injection (Metasploit)
$Id: mitelawcexec.rb 11516 2011-01-08 01:13:26Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...
Mitel Audio and Web Conferencing (AWC) RCE Vulnerability (Jan 2011)
Mitel Audio and Web Conferencing AWC is prone to a remote command injection vulnerability because it fails to adequately sanitize user-supplied input data. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
Mitel Audio and Web Conferencing (AWC) Remote Arbitrary Shell Command Injection Vulnerability
Mitel Audio and Web Conferencing AWC is prone to a remote command-injection vulnerability because it fails to adequately sanitize user-supplied input data. Remote attackers can exploit this issue to execute arbitrary shell commands with the privileges of the user running the application. OpenVAS...
PR10-14 Unauthenticated command execution within Mitel's AWC (Mitel Audio and Web Conferencing)
http://www.procheckup.com/vulnerabilitymanager/vulnerabilities/pr10-14 PR10-14 Unauthenticated command execution within Mitel's AWC Mitel Audio and Web Conferencing Advisory publicly released: Tuesday, 21 December 2010 Vulnerability found: Wednesday, 21 July 2010 Vendor informed: Monday, 26 July...
Mitel Audio and Web Conferencing Command Injection
$Id: mitelawcexec.rb 11389 2010-12-21 19:16:18Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Mitel AWC - Command Execution
Mitel AWC - Command Execution http://www.procheckup.com/vulnerabilitymanager/vulnerabilities/pr10-14 PR10-14 Unauthenticated command execution within Mitel's AWC Mitel Audio and Web Conferencing Advisory publicly released: Tuesday, 21 December 2010 Vulnerability found: Wednesday, 21 July 2010...
Mitel AWC Unauthenticated Command Execution
Exploit for cgi platform in category web applications PR10-14 Unauthenticated command execution within Mitel's AWC Mitel Audio and Web Conferencing Advisory publicly released: Tuesday, 21 December 2010 Vulnerability found: Wednesday, 21 July 2010 Vendor informed: Monday, 26 July 2010 Severity...
Mitel AWC - Command Execution
http://www.procheckup.com/vulnerabilitymanager/vulnerabilities/pr10-14 PR10-14 Unauthenticated command execution within Mitel's AWC Mitel Audio and Web Conferencing Advisory publicly released: Tuesday, 21 December 2010 Vulnerability found: Wednesday, 21 July 2010 Vendor informed: Monday, 26 July...
Mitel Audio and Web Conferencing (AWC) - Arbitrary Shell Command Injection
Mitel Audio and Web Conferencing AWC - Arbitrary Shell Command Injection source: https://www.securityfocus.com/bid/45537/info Mitel Audio and Web Conferencing AWC is prone to a remote command-injection vulnerability because it fails to adequately sanitize user-supplied input data. Remote attacker...
Mitel's AWC Command Execution
http://www.procheckup.com/vulnerabilitymanager/vulnerabilities/pr10-14 PR10-14 Unauthenticated command execution within Mitel's AWC Mitel Audio and Web Conferencing Advisory publicly released: Tuesday, 21 December 2010 Vulnerability found: Wednesday, 21 July 2010 Vendor informed: Monday, 26 July...
Mitel Audio and Web Conferencing (AWC) - Arbitrary Shell Command Injection
source: https://www.securityfocus.com/bid/45537/info Mitel Audio and Web Conferencing AWC is prone to a remote command-injection vulnerability because it fails to adequately sanitize user-supplied input data. Remote attackers can exploit this issue to execute arbitrary shell commands with the...
Mitel Audio and Web Conferencing Command Injection
This module exploits a command injection flaw within the Mitel Audio and Web Conferencing web interface. Module Options msf use exploit/unix/webapp/mitel/awcexec msf undefinedawcexec show actions ...actions... msf undefinedawcexec set ACTION msf undefinedawcexec show options ...show and set...
Design/Logic Flaw
The server in Mitel NuPoint Messenger R11 and R3 sends usernames and passwords in cleartext to Exchange servers, which allows remote attackers to obtain sensitive information by sniffing the network...
CVE-2008-6797
The server in Mitel NuPoint Messenger R11 and R3 sends usernames and passwords in cleartext to Exchange servers, which allows remote attackers to obtain sensitive information by sniffing the network...
CVE-2008-6797
The server in Mitel NuPoint Messenger R11 and R3 sends usernames and passwords in cleartext to Exchange servers, which allows remote attackers to obtain sensitive information by sniffing the network...
CVE-2008-6797
The CVE-2008-6797 entry concerns Mitel NuPoint Messenger (R11 and R3) where the server sends usernames and passwords in cleartext to Exchange servers, enabling remote attackers to sniff network traffic and obtain sensitive credentials. Red Hat and other sources corroborate the same description. T...
NuPoint Messenger server transmits authentication credentials in plain text
Overview NuPoint Messenger is a unified communications product that connects to a Microsoft Exchange server. When communicating with the mail server, the NuPoint Messenger server transmits Exchange usernames and passwords in cleartext. Description The NuPoint Messenger server can connect to a...
