JVN#17964918: Multiple I-O DATA LAN routers vulnerable in UPnP functionality

A wired LAN router NP-BBRS and a wireless LAN router WN-G54/R2 provided by I-O DATA DEVICE, INC. contain a vulnerability in the UPnP functionality. Impact The device may be used in a DDoS attack, as a SSDP reflector. Solution For NP-BBRS: Do not use NP-BBRS The developer has stated that the suppo...

JVN#27142693: NP-BBRM vulnerable in UPnP functionality

NP-BBRM provided by I-O DATA DEVICE, INC. is a LAN router. NP-BBRM contains a vulnerability in the UPnP functionality. Impact The device may be used in a DDoS attack, as a SSDP reflector. Solution Disable UPnP Disable UPnP functionality from the management configuration in the settings screen...

Wordpress Plugin ThreeWP Email Reflector 1.13 - Stored XSS

No description provided by source. !/usr/bin/python ''' Author: loneferret of Offensive Security Product: ThreeWP Email Reflector Version: 1.13 Plugin Site: http://mindreantre.se/ Software Download: http://wordpress.org/extend/plugins/threewp-email-reflector/installation/ Timeline: 29 May 2012:...

CVE-2012-2572

Cross-site scripting XSS vulnerability in the ThreeWP Email Reflector plugin before 1.16 for WordPress allows remote attackers to inject arbitrary web script or HTML via the Subject of an email...

Cross site scripting

Cross-site scripting XSS vulnerability in the ThreeWP Email Reflector plugin before 1.16 for WordPress allows remote attackers to inject arbitrary web script or HTML via the Subject of an email...

CVE-2012-2572

Cross-site scripting XSS vulnerability in the ThreeWP Email Reflector plugin before 1.16 for WordPress allows remote attackers to inject arbitrary web script or HTML via the Subject of an email...

CVE-2012-2572

The CVE-2012-2572 entry affects the ThreeWP Email Reflector plugin for WordPress (versions before 1.16). The vulnerability is a Cross-Site Scripting (XSS) flaw in the Subject field of emails, due to insufficient input sanitization, allowing remote attackers to inject arbitrary web script or HTML....

siteserver latest version 3. 6. 4 background_log. aspx page sql injection vulnerability-vulnerability warning-the black bar safety net

There siteserver/platform/backgroundlog. aspx 用 .NET Reflector decompile BaiRong. BackgroundPages. dll this file View Code is as follows: this. spContents. ConnectionString = BaiRongDataProvider. ConnectionString; flag = base. Request. QueryString"UserName" != null; if ! flag this. spContents...

SiteServer 3.6.4 background_mailSubscribe.aspx SQL注入漏洞

注入存在/siteserver/cms/backgroundmailSubscribe.aspx 用.NET Reflector 反编译SiteServer.CMS.dll这个文件 查看代码如下： if uint isPostBack - uint isPostBack = 0 && isPostBack this.spContents.SelectCommand = DataProvider.MailSubscribeDAO.GetSelectCommendbase.PublishmentSystemID, base.Request.QueryString"Keyword",...

Fedora Update for quagga FEDORA-2012-9103

Check for the Version of quagga OpenVAS Vulnerability Test Fedora Update for quagga FEDORA-2012-9103 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

WordPress ThreeWP Email Reflector Plugin - Stored XSS

ThreeWP Email Reflector plugin is prone to a stored XSS vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal cookie-based authentication...

WordPress Plugin ThreeWP Email Reflector 1.13 - Persistent Cross-Site Scripting

!/usr/bin/python ''' Author: loneferret of Offensive Security Product: ThreeWP Email Reflector Version: 1.13 Plugin Site: http://mindreantre.se/ Software Download: http://wordpress.org/extend/plugins/threewp-email-reflector/installation/ Timeline: 29 May 2012: Vulnerability reported to CERT 30 Ma...

WordPress Plugin ThreeWP Email Reflector 1.13 - Persistent Cross-Site Scripting

WordPress Plugin ThreeWP Email Reflector 1.13 - Persistent Cross-Site Scripting !/usr/bin/python ''' Author: loneferret of Offensive Security Product: ThreeWP Email Reflector Version: 1.13 Plugin Site: http://mindreantre.se/ Software Download:...

Fedora Update for quagga FEDORA-2012-9116

Check for the Version of quagga OpenVAS Vulnerability Test Fedora Update for quagga FEDORA-2012-9116 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

[SECURITY] Fedora 15 Update: quagga-0.99.20.1-2.fc15

Quagga is a free software that manages TCP/IP based routing protocol. It takes multi-server and multi-thread approach to resolve the current complexity of the Internet. Quagga supports BGP4, BGP4+, OSPFv2, OSPFv3, RIPv1, RIPv2, and RIPng. Quagga is intended to be used as a Route Server and a Rout...

[SECURITY] Fedora 16 Update: quagga-0.99.21-2.fc16

Quagga is free software that operates TCP/IP-based routing protocols. It ta kes a multi-server and multi-threaded approach to resolving the current complex ity of the Internet. Quagga supports Babel, BGP4, BGP4+, BGP4-, IS-IS experimental, OSPFv2, OSPFv3, RIPv1, RIPv2, and RIPng. Quagga is intend...

[SECURITY] Fedora 15 Update: quagga-0.99.20.1-1.fc15

Quagga is a free software that manages TCP/IP based routing protocol. It takes multi-server and multi-thread approach to resolve the current complexity of the Internet. Quagga supports BGP4, BGP4+, OSPFv2, OSPFv3, RIPv1, RIPv2, and RIPng. Quagga is intended to be used as a Route Server and a Rout...

[SECURITY] Fedora 17 Update: quagga-0.99.20.1-1.fc17

Quagga is a free software that manages TCP/IP based routing protocol. It takes multi-server and multi-thread approach to resolve the current complexity of the Internet. Quagga supports BGP4, BGP4+, OSPFv2, OSPFv3, RIPv1, RIPv2, and RIPng. Quagga is intended to be used as a Route Server and a Rout...

Fedora Update for quagga FEDORA-2011-13499

Check for the Version of quagga OpenVAS Vulnerability Test Fedora Update for quagga FEDORA-2011-13499 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

[SECURITY] Fedora 16 Update: quagga-0.99.20-2.fc16

Quagga is a free software that manages TCP/IP based routing protocol. It takes multi-server and multi-thread approach to resolve the current complexity of the Internet. Quagga supports BGP4, BGP4+, OSPFv2, OSPFv3, RIPv1, RIPv2, and RIPng. Quagga is intended to be used as a Route Server and a Rout...