Lucene search
+L

312 matches found

NVD
NVD
•added 2010/04/27 3:30 p.m.•30 views

CVE-2009-4812

Wolfram Research webMathematica allows remote attackers to obtain sensitive information via a direct request to the MSP script, which reveals the installation path in an error message...

5CVSS6.1AI score0.0114EPSS
SaveExploits1References1
Prion
Prion
•added 2010/04/27 3:30 p.m.•27 views

Information disclosure

Wolfram Research webMathematica allows remote attackers to obtain sensitive information via a direct request to the MSP script, which reveals the installation path in an error message...

5CVSS6.6AI score0.0114EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2010/04/27 3:00 p.m.•52 views

CVE-2009-4814

CVE-2009-4814 describes a cross-site scripting (XSS) vulnerability in Wolfram Research WebMathematica, allowing remote attackers to inject arbitrary web script or HTML via the URI to the MSP script. The documents identify the affected component as the WebMathematica MSP script handling URI input,...

4.3CVSS5.9AI score0.01497EPSS
SaveExploits2References5Affected Software1
CVE
CVE
•added 2010/04/27 3:00 p.m.•56 views

CVE-2009-4812

CVE-2009-4812 affects Wolfram Research WebMathematica. An unauthenticated remote attacker can cause the MSP script to disclose the installation path in an error message, resulting in information disclosure. No remediation details are provided in the supplied documents. Exploitation status is not ...

5CVSS6.3AI score0.0114EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2010/04/27 3:00 p.m.•38 views

CVE-2009-4814

Cross-site scripting XSS vulnerability in Wolfram Research webMathematica allows remote attackers to inject arbitrary web script or HTML via the URI to the MSP script...

5.7AI score0.01497EPSS
SaveExploits2References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/04/27 12:00 a.m.•3 views

CVE-2009-4812: Exposure of Sensitive Information to an Unauthorized Actor

Wolfram Research webMathematica allows remote attackers to obtain sensitive information via a direct request to the MSP script, which reveals the installation path in an error message...

5CVSS5.8AI score0.0114EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/04/27 12:00 a.m.•2 views

CVE-2009-4814: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Wolfram Research webMathematica allows remote attackers to inject arbitrary web script or HTML via the URI to the MSP script...

4.3CVSS6AI score0.01497EPSS
SaveExploits2References2
Core Security
Core Security
•added 2010/02/09 12:00 a.m.•47 views

Microsoft Office Excel / Word OfficeArtSpgr Container Pointer Overwrite Vulnerability

Advisory ID Internal CORE-2009-0827 1. Advisory Information Title: Microsoft Office Excel / Word OfficeArtSpgr Container Pointer Overwrite Vulnerability Advisory Id: CORE-2009-0827 Date published: 2010-02-09 Date of last update: 2010-02-08 Vendors contacted: Microsoft Release mode: Coordinated...

9.3CVSS7.1AI score0.23625EPSS
SaveExploits0
seebug.org
seebug.org
•added 2009/12/23 12:00 a.m.•49 views

webMathematica XSS Vulnerability

No description provided by source. In some installations, the MSP script of webMathematica is vulnerable to reflected XSS. Just insert a backslash after the script name MSP, which is normally located under the "webMathematica" folder: http://www.example.com/webMathematica/MSP\scriptalert'a'/scrip...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2009/12/23 12:00 a.m.•40 views

webMathematica Cross Site Scripting

Hi list I tried to follow the RainForest Puppy Policy, but Wolfram didn't respond to my email within 5 days. In some installations, the MSP script of webMathematica is vulnerable to reflected XSS. Just insert a backslash after the script name MSP, which is normally located under the...

7.4AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2009/02/02 12:00 a.m.•9 views

Openwave MSP Any Default Password (deprecated)

Binary data 4886.prm...

7.3AI score
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/11/08 12:00 a.m.•4 views

CVE-2007-5891: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in jsp/Login.do in ManageEngine OpManager MSP Edition and OpManager 7.0 allow remote attackers to inject arbitrary web script or HTML via the 1 requestid, 2 fileid, 3 woMode, and 2 woID parameters. NOTE: the provenance of this information is...

4.3CVSS5.9AI score0.01033EPSS
SaveExploits0References2
Rows per page
Query Builder