EUVD-2009-3014

Malware in sbrugna...

EUVD-2009-3013

Malware in sbrugna...

Cross site scripting

Cross-site scripting XSS vulnerability in the console in Symantec SecurityExpressions Audit and Compliance Server 4.1.1, 4.1, and earlier allows remote authenticated users to inject arbitrary web script or HTML via "external client input" that triggers crafted error messages...

CVE-2009-3030

Cross-site scripting XSS vulnerability in Symantec SecurityExpressions Audit and Compliance Server 4.1.1, 4.1, and earlier allows remote attackers to inject arbitrary web script or HTML via vectors that trigger an error message in a response, related to an "HTML Injection issue."...

Cross site scripting

Cross-site scripting XSS vulnerability in Symantec SecurityExpressions Audit and Compliance Server 4.1.1, 4.1, and earlier allows remote attackers to inject arbitrary web script or HTML via vectors that trigger an error message in a response, related to an "HTML Injection issue."...

CVE-2009-3029

Cross-site scripting XSS vulnerability in the console in Symantec SecurityExpressions Audit and Compliance Server 4.1.1, 4.1, and earlier allows remote authenticated users to inject arbitrary web script or HTML via "external client input" that triggers crafted error messages...

CVE-2009-3029

Cross-site scripting XSS vulnerability in the console in Symantec SecurityExpressions Audit and Compliance Server 4.1.1, 4.1, and earlier allows remote authenticated users to inject arbitrary web script or HTML via "external client input" that triggers crafted error messages...

CVE-2009-3030

Cross-site scripting XSS vulnerability in Symantec SecurityExpressions Audit and Compliance Server 4.1.1, 4.1, and earlier allows remote attackers to inject arbitrary web script or HTML via vectors that trigger an error message in a response, related to an "HTML Injection issue."...

CVE-2009-3030

CVE-2009-3030 relates to Symantec SecurityExpressions Audit and Compliance Server (versions 4.1 and 4.1.1 and earlier) and covers multiple XSS/HTML-injection issues. The documented vulnerabilities arise from insufficient input validation and failing to properly encode error messages, allowing rem...

CVE-2009-3029

CVE-2009-3029 (and related CVE-2009-3030) affects Symantec SecurityExpressions Audit and Compliance Server 4.1.1, 4.1, and earlier. The vulnerability is a cross-site scripting issue in the console, where external client input is not properly sanitized and some error messages are not encoded, enab...

Symantec SecurityExpressions跨站脚本和HTML注入漏洞

BUGTRAQ ID: 36570,36571 CVECAN ID: CVE-2009-3029,CVE-2009-3030 Symantec SecurityExpressions是用于在企业执行安全核查、合规性和配置检查的安全解决方案。 SecurityExpression审计和合规性服务器没有正确地验证客户端提交给控制台的输入，远程攻击者可以通过提交恶意请求执行存储式跨站脚本攻击；此外由于没有正确地编码响应的出错消息，远程攻击者还可以在返回给用户的响应中注入恶意HTML内容。 Symantec SecurityExpressions 4.1.1 Symantec...

Symantec SecurityExpressions Audit and Compliance Server Multiple XSS

Symantec SecurityExpressions Audit and Compliance Server is installed on the remote host. The installed version is affected by multiple cross-site scripting vulnerabilities. - The web console fails to sanitize user-supplied input to certain unspecified parameters. An authorized user may be able t...

Symantec SecurityExpressions Audit and Compliance Server Multiple XSS

Binary data 5206.prm...