EUVD-2004-2541

Malware in sbrugna...

EUVD-2004-2079

Malware in sbrugna...

CVE-2004-2550

SandSurfer before version 1.7.1 is vulnerable to multiple cross-site scripting (XSS) in unspecified Perl scripts, potentially allowing attackers to inject scripts that execute in affected users’ browsers when viewing reports containing injected data. The Nessus entry and CVE records align on the ...

CVE-2004-2550

Multiple cross-site scripting XSS vulnerabilities in unspecified Perl scripts in SandSurfer before 1.7.1 allow remote attackers to inject arbitrary web script or HTML, which is later executed by a target who views reports containing the injected data...

CVE-2004-2087

Unknown vulnerability in SandSurfer before 1.7.0 allows remote attackers to gain access as a logged-in user...

CVE-2004-2087

CVE-2004-2087 affects SandSurfer prior to version 1.7.0. The provided sources describe an access issue in which an attacker could gain access as a logged-in user (per CVE entry) and, per Nessus content, an authentication bypass affecting versions up to 1.6.5. The exact root cause is not consisten...

CVE-2004-2550

Multiple cross-site scripting XSS vulnerabilities in unspecified Perl scripts in SandSurfer before 1.7.1 allow remote attackers to inject arbitrary web script or HTML, which is later executed by a target who views reports containing the injected data...

SandSurfer < 1.7.1 XSS

The remote host is running SandSurfer, a web-based time keeping application. A vulnerability has been disclosed in all versions of this software, up to version 1.7.0 included which may allow an attacker to use it to perform cross-site scripting attacks against third-party users. %NASLMINLEVEL 703...

SandSurfer < 1.7.0 User Authentication Bypass

The remote host is running SandSurfer, a web-based time keeping application. A vulnerability has been disclosed in all versions of this software, up to version 1.6.5 included that could allow an attacker to access the application without authenticating. %NASLMINLEVEL 70300 C Tenable Network...

CVE-2004-2087

Unknown vulnerability in SandSurfer before 1.7.0 allows remote attackers to gain access as a logged-in user...