McAfee UTM Firewall Cross Site Scripting

Advisory Information Advisory ID: NGENUITY-2010-005 Date published: 6/9/2010 Vulnerability Information Class: Reflected Cross-Site Scripting XSS Software Description McAfee UTM Firewall Firmware 3.0.0 to 4.0.6 formerly SnapGear is the affected product line. More information can be found at...

EGroupware 1.6.002 / EGroupware Premium Line 9.1 Multiple Vulnerability

Exploit for unknown platform in category web applications ========================================================================= EGroupware 1.6.002 / EGroupware Premium Line 9.1 Multiple Vulnerabilities ========================================================================= Advisory Name:...

eGroupWare 1.6.002 and eGroupWare premium line 9.1 - Multiple Vulnerabilities

eGroupWare 1.6.002 and eGroupWare premium line 9.1 - Multiple Vulnerabilities Advisory Name: Remote Command Execution in EGroupware Vulnerability Class: Remote Command Execution Release Date: 2010-03-09 Affected Applications: Confirmed in EGroupware 1.4.001+.002 and 1.6.001+.002. EGroupware Premi...

FreeBSD : egroupware -- two vulnerabilities (e39caf05-2d6f-11df-aec2-000c29ba66d2)

Egroupware Team report : Nahuel Grisolia from CYBSEC S.A. Security Systems found two security problems in EGroupware : Serious remote command execution allowing to run arbitrary command on the web server by simply issuing a HTTP request!. A reflected cross-site scripting XSS. Both require NO vali...

egroupware -- two vulnerabilities

Egroupware Team report: Nahuel Grisolia from CYBSEC S.A. Security Systems found two security problems in EGroupware: Serious remote command execution allowing to run arbitrary command on the web server by simply issuing a HTTP request!. A reflected cross-site scripting XSS. Both require NO valid...

Hacktics Advisory Feb10: XSS in IBM WebSphere Portal & Lotus WCM

Hacktics Research Group Security Advisory http://www.hacktics.com/view=Resources7CAdvisory By Oren Hafif, Hacktics. 24-Feb-2010 =========== I. Overview =========== During a penetration test performed by Hacktics' experts, certain vulnerabilities were identified in an IBM Websphere Portal Server a...

webcit-multi.txt

Vendor contacted: 2007-06-24 Affects: Webcit 7.11 Fixed: 2007-07-06 WebCit 7.11 1. Background WebCit is the webfrontend to administer and use Citadel, which is an open-source groupware server. 2. Session Riding 2.I. Problem Description It is possible for an attacker to execute actions in the name...