Silver Peak VX < 6.2.4 XSS

The Silver Peak VX install hosted on the remote web server is affected by a cross-site scripting XSS vulnerability in the 'userid' parameter of the '/php/useraccount.php' script. An attacker can leverage this issue to inject arbitrary HTML and script code into a user's browser to be executed with...

Silver Peak NX Detection

Binary data silverpeaknxdetect.nbin...

CVE-2014-2974

Cross-site request forgery CSRF vulnerability in php/useraccount.php in Silver Peak VX through 6.2.4 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts...

CVE-2014-2975

Cross-site scripting XSS vulnerability in php/useraccount.php in Silver Peak VX before 6.2.4 allows remote attackers to inject arbitrary web script or HTML via the userid parameter...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in php/useraccount.php in Silver Peak VX through 6.2.4 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts...

Cross site scripting

Cross-site scripting XSS vulnerability in php/useraccount.php in Silver Peak VX before 6.2.4 allows remote attackers to inject arbitrary web script or HTML via the userid parameter...

CVE-2014-2975

Cross-site scripting XSS vulnerability in php/useraccount.php in Silver Peak VX before 6.2.4 allows remote attackers to inject arbitrary web script or HTML via the userid parameter...

CVE-2014-2975

Silver Peak VX prior to version 6.2.4 is affected by a reflected cross-site scripting (XSS) vulnerability in the /php/user_account.php module where the user_id parameter can inject arbitrary HTML/script into a user’s browser. Exploitation could arise from crafted input, as noted across CVE-2014-2...

CVE-2014-2974

Cross-site request forgery CSRF vulnerability in php/useraccount.php in Silver Peak VX through 6.2.4 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts...

CVE-2014-2974

The CVE-2014-2974 issue affects Silver Peak VX prior to a fixed release. A CSRF in /php/user_account.php allows an unauthenticated user to cause administrative accounts to be created, enabling an attacker to hijack administrator sessions/privileges. Affected product: Silver Peak VX (versions up t...

Silver Peak VX is vulnerable to cross-site request forgery and cross-site scripting

Overview Silver Peak VX version 6.2.2.047968 is vulnerable to cross-site request forgery and cross-site scripting. Description CWE-352: Cross-Site Request Forgery CSRF - CVE-2014-2974Silver Peak VX version 6.2.2.047968 contains a cross-site request forgery vulnerability in /php/useraccount.php...

prevent crashing when running out of database connections

panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Server. Using Confluence Cloud? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFCLOUD-33522. panel One common total crash for Confluence is when it does run out of database connection. Any reliable web application...

prevent crashing when running out of database connections

One common total crash for Confluence is when it does run out of database connection. Any reliable web application should be able to resist to a peak in number of request and not to fully crash when this happens. This is also a security issue because it means that anyone could easily bring the...

prevent crashing when running out of database connections

panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Cloud. Using Confluence Server? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFSERVER-33522. panel One common total crash for Confluence is when it does run out of database connection. Any reliable web application...

Lone Peak Video Productions 1.0 Cross Site Scripting

+===================================================================================+ ./SEC-R1Z / / / / /\ \ |/ / \ \ / / / / | | / | | / / \ / / / / | || / | | / / \ \ \ \2009 | \ | | / / / \ /\ / ||\ \ ||/ \ R.I.P MichaelJackson !!!!!...

PEAK XOOPS piCal cross-site scripting vulnerability

Overview piCal from PEAK XOOPS contains a cross-site scripting vulnerability. piCal from PEAK XOOPS is a calendar module with a scheduler for XOOPS. piCal contains a cross-site scripting vulnerability. Masako Oono of NetAgent Co.,Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with...

JVN#91591874 PEAK XOOPS piCal cross-site scripting vulnerability

piCal from PEAK XOOPS is a calendar module with a scheduler for XOOPS. piCal contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the latest version according to the information provided by the...