Mitel AWC - Command Execution

Mitel AWC - Command Execution http://www.procheckup.com/vulnerabilitymanager/vulnerabilities/pr10-14 PR10-14 Unauthenticated command execution within Mitel's AWC Mitel Audio and Web Conferencing Advisory publicly released: Tuesday, 21 December 2010 Vulnerability found: Wednesday, 21 July 2010...

Mitel AWC Unauthenticated Command Execution

Exploit for cgi platform in category web applications PR10-14 Unauthenticated command execution within Mitel's AWC Mitel Audio and Web Conferencing Advisory publicly released: Tuesday, 21 December 2010 Vulnerability found: Wednesday, 21 July 2010 Vendor informed: Monday, 26 July 2010 Severity...

WordPress Viva Thumbs Directory Traversal

http://www.procheckup.com/vulnerabilitymanager/vulnerabilities/pr10-04 PR10-04 Directory traversal limited to file validation within Viva thumbs WordPress add-on Advisory publicly released: Tuesday, 21 December 2010 Vulnerability found: Thursday, 4 February 2010 Vendor informed: Monday, 8 Februar...

Mitel AWC - Command Execution

http://www.procheckup.com/vulnerabilitymanager/vulnerabilities/pr10-14 PR10-14 Unauthenticated command execution within Mitel's AWC Mitel Audio and Web Conferencing Advisory publicly released: Tuesday, 21 December 2010 Vulnerability found: Wednesday, 21 July 2010 Vendor informed: Monday, 26 July...

Mitel's AWC Command Execution

http://www.procheckup.com/vulnerabilitymanager/vulnerabilities/pr10-14 PR10-14 Unauthenticated command execution within Mitel's AWC Mitel Audio and Web Conferencing Advisory publicly released: Tuesday, 21 December 2010 Vulnerability found: Wednesday, 21 July 2010 Vendor informed: Monday, 26 July...

PHP Universal Web Messenger Cross-Domain Redirect

http://www.procheckup.com/vulnerabilitymanager/vulnerabilities/pr10-06 PR10-06 Cross-domain redirect on PGP Universal Web Messenger Advisory publicly released: Thursday, 16 December 2010 Vulnerability found: Wednesday, 10 February 2010 Vendor informed: Wednesday, 10 February 2010 Vulnerability...

BlogCFC Cross Site Scripting

http://www.procheckup.com/vulnerabilitymanager/vulnerabilities/pr10-10 PR10-10 Various XSS within BlogCFC Advisory publicly released: Tuesday, 14 December 2010 Vulnerability found: Sunday, 2 May 2010 Vendor informed: Monday, 3 May 2010 Vulnerability fixed: Wednesday, 19 May 2010 Severity level:...

Mura CMS 5.2.2085 Cross Site Scripting

ProCheckUp Research PR10-09 Multiple XSS and Cross Domain redirect within Mura CMS Advisory publicly released: Monday, 13 December 2010 Vulnerability found: Monday, 19 April 2010 Vendor informed: Tuesday, 20 April 2010 Severity level: Medium Credits Richard Brain of ProCheckUp Ltd...

HP System Management Homepage Cross Site Scripting

PR10-05: XSS injection vulnerability within HP System Management Homepage Formally Insight Manager Vulnerability found: 8th February 2010 Vendor informed: 9th February 2010 Vulnerability fixed: 6th August 2010 Severity: Medium Description: An XSS vulnerability has been found within HP system...

DotNetNuke CMS Cross Site Scripting

PR10-19 DotNetNuke CMS XSS Advisory publicly released: Friday, 3 December 2010 Vulnerability found: Saturday, 30 October 2010 Vendor informed: Monday, 1 November 2010 Severity level: Low/Medium Credits Richard Brain of ProCheckUp Ltd www.procheckup.com Description DotNetNuke is a Content Manageme...

PR10-07: Unauthenticated File Retrieval (traversal) within ColdFusion administration console

PR10-07: Unauthenticated File Retrieval traversal within ColdFusion administration console Vulnerability found: 17th April 2010 Vendor informed: 19th April 2010 Vulnerability fixed: 10th August 2010 Severity: High Description: Adobe ColdFusion is a easy to use and very widely adopted Programming...

PR09-16: Juniper Secure Access series (Juniper IVE) Cross-Site Scripting Vulnerability

PR09-16: Juniper Secure Access series Juniper IVE XSS Vulnerability found: 12th October 2009 Severity: Medium Script injection Description: There is a Cross-site Scripting vulnerability on Juniper, IVE web interface. Procheckup has found by making a malformed request to the IVE Web interface...

ProCheckUp Security Advisory 2009.16

PR09-16: Juniper Secure Access series Juniper IVE XSS Vulnerability found: 12th October 2009 Severity: Medium Script injection Description: There is a Cross-site Scripting vulnerability on Juniper, IVE web interface. Procheckup has found by making a malformed request to the IVE Web interface...

PR09-17: Juniper Secure Access seriers (Juniper IVE) authenticated XSS & REDIRECTION

PR09-17: Juniper Secure Access series Juniper IVE authenticated XSS & REDIRECTION http://www.procheckup.com/vulnerabilitymanager/vulnerabilities/pr09-17 Vulnerability found: 12th October 2009 Vendor informed: 12 October 2009 Severity: Medium Script injection Description: There are multiple...

PR10-01: Unauthenticated File Retrieval (traversal) within 3Com* iMC (Intelligent Management Center)

PR10-01: Unauthenticated File Retrieval traversal within 3Com iMC Intelligent Management Center On the 12th April 2010 Hewlett Packard completed its acquisition of 3Com Vulnerability found: 30th January 2010 Vendor informed: 1st February 2010 Vulnerability fixed: 13th May 2010 Severity: High...

3Com* iMC (Intelligent Management Center) - Traversal File Retrieval

3Com iMC Intelligent Management Center - Traversal File Retrieval PR10-01: Unauthenticated File Retrieval traversal within 3Com iMC Intelligent Management Center On the 12th April 2010 Hewlett Packard completed its acquisition of 3Com Vulnerability found: 30th January 2010 Vendor informed: 1st...

3Com* iMC (Intelligent Management Center) - Traversal File Retrieval

PR10-01: Unauthenticated File Retrieval traversal within 3Com iMC Intelligent Management Center On the 12th April 2010 Hewlett Packard completed its acquisition of 3Com Vulnerability found: 30th January 2010 Vendor informed: 1st February 2010 Vulnerability fixed: 13th May 2010 Severity: High...

Apache Axis2 Administration Console - (Authenticated) Cross-Site Scripting

PR10-03 Authenticated Cross-Site Scripting Vulnerability XSS within Apache Axis2 administration console Source: http://www.procheckup.com/vulnerabilitymanager/vulnerabilities/pr10-03 Advisory publicly released: Friday, 21 May 2010 Vulnerability found: Saturday, 30 January 2010 Severity level:...

ProCheckUp Security Advisory 2009.4

PR09-04: Cross-Site Scriting on Portwise SSL VPN v4.6 Vulnerability found: 25th March 2009 Vendor informed: 28th April 2009 Vulnerability fixed: Severity: Medium Description: The Portwise portal login page is vulnerable to XSS. Portwise is a SSL-VPN portal. Note: Other version might be affected a...

PR09-19: Cross-Site Scripting (XSS) on CommonSpot server

PR09-19: Cross-Site Scripting XSS on CommonSpot server Vulnerability found: 17th December 2009 Vendor informed: 18th December 2009 Severity: Medium Successfully tested on: Commonspot server http://www.paperthin.com/ Description: Commonspot server is vulnerable to a vanilla XSS Vulnerable...