CVE-2017-18006

netpub/server.np in Extensis Portfolio NetPublish has XSS in the quickfind parameter, aka Open Bug Bounty ID OBB-290447...

EUVD-2005-4505

Malware in sbrugna...

EUVD-2017-9147

Malware in sbrugna...

Celartem Extensis Portfolio NetPublish Cross-Site Scripting Vulnerability

Celartem Extensis Portfolio NetPublish is a digital asset management software from Celartem Japan. A cross-site scripting vulnerability exists in Celartem Extensis Portfolio NetPublish. A remote attacker can inject arbitrary web script or HTML by sending the 'quickfind' parameter to the...

Design/Logic Flaw

netpub/server.np in Extensis Portfolio NetPublish has XSS in the quickfind parameter, aka Open Bug Bounty ID OBB-290447...

CVE-2017-18006

netpub/server.np in Extensis Portfolio NetPublish has XSS in the quickfind parameter, aka Open Bug Bounty ID OBB-290447...

CVE-2017-18006

Extensis Portfolio NetPublishe netpub/server.np is affected by an XSS vulnerability in the quickfind parameter (CVE-2017-18006). The issue is consistently described across multiple sources (NVD, Red Hat, CNVD, CVE List) as a cross-site scripting flaw in the quickfind parameter. The connected doc...

PT-2018-6604

Name of the Vulnerable Software and Affected Versions: Extensis Portfolio NetPublish affected versions not specified Description: The issue concerns an XSS vulnerability in the quickfind parameter of the netpub/server.np component. Recommendations: At the moment, there is no information about a...

CVE-2017-18006

netpub/server.np in Extensis Portfolio NetPublish has XSS in the quickfind parameter, aka Open Bug Bounty ID OBB-290447...

CVE-2017-18006: Improper Neutralization of Input During Web Page Generation

netpub/server.np in Extensis Portfolio NetPublish has XSS in the quickfind parameter, aka Open Bug Bounty ID OBB-290447...

Extensis Portfolio Netpublish Server 7.0 Server.NP Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15974/info Portfolio Netpublish Server is prone to a directory traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to...

CVE-2005-4510

Directory traversal vulnerability in server.np in NetPublish Server 7 allows remote attackers to read arbitrary files via "../" sequences in the template parameter...

CVE-2005-4510

CVE-2005-4510 : A directory traversal vulnerability affects NetPublish Server 7’s server.np, enabling remote attackers to read arbitrary files through "../" sequences in the template parameter. The issue is documented across multiple sources (NVD, CVE list) with a MEDIUM base score (AV:N/AC:L/I:P...

CVE-2005-4510

Directory traversal vulnerability in server.np in NetPublish Server 7 allows remote attackers to read arbitrary files via "../" sequences in the template parameter...

CVE-2005-4510: Undefined Security Weakness

Directory traversal vulnerability in server.np in NetPublish Server 7 allows remote attackers to read arbitrary files via "../" sequences in the template parameter...

IRM 012: Portfolio Netpublish Server 7 is vulnerable to a Directory Traversal Attack

---------------------------------------------------------------------- IRM Security Advisory No. 012 Portfolio Netpublish Server 7 is vulnerable to a Directory Traversal Attack Vulnerablity Type / Importance: Information Leakage / High Problem discovered: October 11th 2005 Vendor contacted: Octob...

Extensis Portfolio Netpublish Server 7.0 - Server.NP Directory Traversal

Extensis Portfolio Netpublish Server 7.0 - Server.NP Directory Traversal source: https://www.securityfocus.com/bid/15974/info Portfolio Netpublish Server is prone to a directory traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An...

Extensis Portfolio Netpublish Server 7.0 - Server.NP Directory Traversal

source: https://www.securityfocus.com/bid/15974/info Portfolio Netpublish Server is prone to a directory traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to retrieve arbitrary files in the conte...