CVE-2005-4196

CVE-2005-4196 affects Scout Portal Toolkit (SPT) 1.3.1 and earlier. The issue is multiple cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via numerous parameters (e.g., ss in QuickSearch, ParentId in BrowseResources, ResourceId in Full...

CVE-2005-4195

CVE-2005-4195 describes multiple SQL injection vulnerabilities in Scout Portal Toolkit (SPT) versions up to 1.3.1 (and note that vector 1 was reportedly present in 1.4.0). The affected entry lists five input points: (1) ParentId in SPT--BrowseResources.php, (2) ResourceId in SPT--FullRecord.php, ...

Scout Portal Toolkit 1.3.1 - SPT-AdvancedSearch.php Cross-Site Scripting

Scout Portal Toolkit 1.3.1 - SPT-AdvancedSearch.php Cross-Site Scripting source: https://www.securityfocus.com/bid/15818/info Scout Portal Toolkit is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. A successful exploit cou...

Scout Portal Toolkit 1.3.1 - 'SPT-BrowseResources.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15818/info Scout Portal Toolkit is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. A successful exploit could allow an attacker to compromise the application, access or modify data...

Scout Portal Toolkit 1.3.1 - SPT-UserLogin.php SQL Injection

Scout Portal Toolkit 1.3.1 - SPT-UserLogin.php SQL Injection source: https://www.securityfocus.com/bid/15818/info Scout Portal Toolkit is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. A successful exploit could allow an...

Scout Portal Toolkit 1.3.1 - SPT-BrowseResources.php Cross-Site Scripting

Scout Portal Toolkit 1.3.1 - SPT-BrowseResources.php Cross-Site Scripting source: https://www.securityfocus.com/bid/15818/info Scout Portal Toolkit is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. A successful exploit...

Scout Portal Toolkit 1.3.1 - 'SPT-QuickSearch.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15818/info Scout Portal Toolkit is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. A successful exploit could allow an attacker to compromise the application, access or modify data...

Scout Portal Toolkit 1.3.1 - 'SPT-UserLogin.php' SQL Injection

source: https://www.securityfocus.com/bid/15818/info Scout Portal Toolkit is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. A successful exploit could allow an attacker to compromise the application, access or modify data...

Scout Portal Toolkit 1.3.1 - SPT-QuickSearch.php Cross-Site Scripting

Scout Portal Toolkit 1.3.1 - SPT-QuickSearch.php Cross-Site Scripting source: https://www.securityfocus.com/bid/15818/info Scout Portal Toolkit is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. A successful exploit could...

Scout Portal Toolkit 1.3.1 - 'SPT-AdvancedSearch.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15818/info Scout Portal Toolkit is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. A successful exploit could allow an attacker to compromise the application, access or modify data...

CVE-2004-2697

The Inventory Scout daemon invscoutd 1.3.0.0 and 2.0.2 for AIX 4.3.3 and 5.1 allows local users to gain privileges via a symlink attack on a command line argument log file. NOTE: this might be related to CVE-2006-5002...

IBM AIX Inventory Scout symbolic links problem

Unsafe temporary dirs usage...

[EXPL] IBM AIX Inventory Scout Log File Vulnerability (invscoutd)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...