4 matches found
CVE-2015-4027: Undefined Security Weakness
The AcuWVSSchedulerv10 service in Acunetix Web Vulnerability Scanner WVS before 10 build 20151125 allows local users to gain privileges via a command parameter in the reporttemplate property in a params JSON object to api/addScan...
PT-2015-6390
Name of the Vulnerable Software and Affected Versions Acunetix Web Vulnerability Scanner WVS versions prior to 10 build 20151125 Description The issue allows local users to gain privileges via a command parameter in the reporttemplate property in a params JSON object to the "api/addScan" API...
Acunetix WVS 10 Local Privilege Escalation
''' ======================================================================== Acunetix WVS 10 - from guest to Sytem Local privilege escalation CVE: CVE-2015-4027 Author: me Daniele Linguaglossa Affected Product: Acunetix WVS 10 Exploit: Local privilege escalation Vendor: Acunetix ltd Remote: No...
PT-2013-4782
Name of the Vulnerable Software and Affected Versions IBM TRIRIGA Application Platform versions 2.x through 3.x before 3.3.1.1 IBM TRIRIGA Application Platform version 8 Description The issue allows remote authenticated users to inject arbitrary web script or HTML. This can be achieved via...