15 matches found
EUVD-2014-2025
Malware in sbrugna...
CVE-2014-1973
Directory traversal vulnerability in the NextApp File Explorer application before 2.1.0.3 for Android allows remote attackers to overwrite or create arbitrary files via a crafted filename...
Directory traversal
Directory traversal vulnerability in the NextApp File Explorer application before 2.1.0.3 for Android allows remote attackers to overwrite or create arbitrary files via a crafted filename...
CVE-2014-1973
This CVE concerns NextApp File Explorer for Android prior to version 2.1.0.3, which is affected by a directory traversal flaw in how it processes file names. A crafted filename could allow a remote, unauthenticated attacker to overwrite or create arbitrary files in directories the app can access....
CVE-2014-1973
Directory traversal vulnerability in the NextApp File Explorer application before 2.1.0.3 for Android allows remote attackers to overwrite or create arbitrary files via a crafted filename...
File Explorer vulnerable to directory traversal
Overview File Explorer provided by NextApp, Inc. contains an issue in processing file names, which may result in a directory traversal CWE-22 vulnerability. Ryohei Koike of Sakura Information Systems Co., Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under...
JVN#84335912: File Explorer vulnerable to directory traversal
File Explorer provided by NextApp, Inc. contains an issue in processing file names, which may result in a directory traversal CWE-22 vulnerability. Impact A remote, unauthenticated attacker may create an arbitrary file or overwrite an existing file in a directory that the application has privileg...
NextApp Echo < 2.1.1 XML Injection Vulnerability
No description provided by source. SEC Consult Security Advisory 20090305-0 ======================================================================== title: NextApp Echo XML Injection Vulnerability program: NextApp Echo vulnerable version: Echo2 2.1.1 homepage: http://echo.nextapp.com/site/echo2...
NextApp Echo XML解析本地文件泄露漏洞
BUGTRAQ ID: 34060 Echo是用于构建基于Web应用的平台。 Echo引擎没有正确地过滤XML输入，所有发送给Echo框架的XML请求都是由JavaScript创建的并通过POST HTTP请求发送给服务器。以下是典型的请求示例： ---cut here--- client-message xmlns="http://www.nextapp.com/products/echo2/climsg" trans-id="3" focus="c25"message-part xmlns="" processor="EchoPropertyUpdate"property...
SEC Consult SA-20090305-0 :: NextApp Echo XML Injection Vulnerability
SEC Consult Security Advisory 20090305-0 ======================================================================== title: NextApp Echo XML Injection Vulnerability program: NextApp Echo vulnerable version: Echo2 2.1.1 homepage: http://echo.nextapp.com/site/echo2 found: Feb. 2008 by: Anonymous / SEC...
NextApp Echo < 2.1.1 XML Injection Vulnerability
No description provided by source. SEC Consult Security Advisory 20090305-0 ======================================================================== title: NextApp Echo XML Injection Vulnerability program: NextApp Echo vulnerable version: Echo2 2.1.1 homepage: http://echo.nextapp.com/site/echo2...
NextApp Echo < 2.1.1 XML Injection Vulnerability
Exploit for multiple platform in category remote exploits ================================================ NextApp Echo ======================================================================== title: NextApp Echo XML Injection Vulnerability program: NextApp Echo vulnerable version: Echo2 2.1.1...
NextApp Echo < 2.1.1 - XML Injection
SEC Consult Security Advisory ======================================================================== title: NextApp Echo XML Injection Vulnerability program: NextApp Echo vulnerable version: Echo2 2.1.1 homepage: http://echo.nextapp.com/site/echo2 found: Feb. 2008 by: Anonymous / SEC Consult...
NextApp Echo 2.1.1 - XML Injection
NextApp Echo 2.1.1 - XML Injection SEC Consult Security Advisory ======================================================================== title: NextApp Echo XML Injection Vulnerability program: NextApp Echo vulnerable version: Echo2 2.1.1 homepage: http://echo.nextapp.com/site/echo2 found: Feb...
NextApp Echo XML Injection
SEC Consult Security Advisory ======================================================================== title: NextApp Echo XML Injection Vulnerability program: NextApp Echo vulnerable version: Echo2 me...