CVE-2007-3010

masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the user parameter during a ping action...

Unfixed XSS vulnerability at www.loopmail.de

Security researcher T-Ping, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting www.loopmail.de, which at the time of submission ranked 8864695 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is current...

Unfixed XSS vulnerability at mail.unbreakable.ch

Security researcher T-Ping, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting mail.unbreakable.ch, which at the time of submission ranked 7360714 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is...

Unfixed XSS vulnerability at www.bruchsal.org

Security researcher T-Ping, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting www.bruchsal.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 22/09/2007. It is currently...

Unfixed XSS vulnerability at www.h-o-m-e-p-a-g-e.info

Security researcher T-Ping, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting www.h-o-m-e-p-a-g-e.info, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 22/09/2007. It is...

Unfixed XSS vulnerability at www.maildome.com

Security researcher T-Ping, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting www.maildome.com, which at the time of submission ranked 524733 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is current...

Unfixed XSS vulnerability at www.vipemail.de

Security researcher T-Ping, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting www.vipemail.de, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is currently...

Unfixed XSS vulnerability at www.6olab.com

Security researcher T-Ping, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting www.6olab.com, which at the time of submission ranked 215654 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/09/2007. It is currently...

Unfixed XSS vulnerability at www.csl-freemail.de

Security researcher T-Ping, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting www.csl-freemail.de, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is currently...

Unfixed XSS vulnerability at www.e-mailversand.com

Security researcher T-Ping, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting www.e-mailversand.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is current...

Unfixed XSS vulnerability at www.maxsoft.ir

Security researcher T-Ping, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting www.maxsoft.ir, which at the time of submission ranked 3699424 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is currentl...

Unfixed XSS vulnerability at darksidecommunity.eu

Security researcher T-Ping, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting darksidecommunity.eu, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 22/09/2007. It is currentl...

Unfixed XSS vulnerability at www.doctormd.net

Security researcher T-Ping, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting www.doctormd.net, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/09/2007. It is currently...

Unfixed XSS vulnerability at mastermail.at

Security researcher T-Ping, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting mastermail.at, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is currently...

Unfixed XSS vulnerability at www.servicepoints.de

Security researcher T-Ping, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting www.servicepoints.de, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/09/2007. It is currentl...

Unfixed XSS vulnerability at www.joy4mail.de

Security researcher T-Ping, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting www.joy4mail.de, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is currently...

Unfixed XSS vulnerability at mail.diabetes-kids.de

Security researcher T-Ping, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting mail.diabetes-kids.de, which at the time of submission ranked 1869789 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is...

Unfixed XSS vulnerability at www.giga4u.eu

Security researcher T-Ping, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting www.giga4u.eu, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 22/09/2007. It is currently...

CVE-2007-3010

masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the user parameter during a ping action. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker...

PT-2007-4307

Name of the Vulnerable Software and Affected Versions: Alcatel OmniPCX Enterprise Communication Server versions R7.1 and earlier Description: The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the user parameter during a ping action. This is related to the...