364 matches found
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Dell OpenManage Server Administrator 6.5.0.1, 7.0.0.1, and 7.1.0.1 allow remote attackers to inject arbitrary web script or HTML via the topic parameter to html/indexmain.htm in 1 help/sm/en/Output/wwhelp/wwhimpl/js/, 2...
CVE-2012-6272
Dell OpenManage Server Administrator (OMSA) versions 6.5.0.1, 7.0.0.1, and 7.1.0.1 contain DOM-based/URL-based XSS via the topic parameter to html/index_main.htm across multiple help paths (e.g., help/sm/en/Output/wwhelp/wwhimpl/js/ and related locales). The vulnerability allows remote attackers ...
PT-2013-1917
Name of the Vulnerable Software and Affected Versions Dell OpenManage Server Administrator versions 6.5.0.1 through 7.1.0.1 Description The issue allows remote attackers to inject arbitrary web script or HTML via the topic parameter to "html/index main.htm" in various help and message guide...
CVE-2012-6272: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Dell OpenManage Server Administrator 6.5.0.1, 7.0.0.1, and 7.1.0.1 allow remote attackers to inject arbitrary web script or HTML via the topic parameter to html/indexmain.htm in 1 help/sm/en/Output/wwhelp/wwhimpl/js/, 2...
RHEL 5 / 6 : Red Hat Network Proxy spacewalk-backend (RHSA-2012:0102)
The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2012:0102 advisory. Red Hat Network RHN Proxy provides a mechanism for caching content, such as package updates from Red Hat or custom content created for an...
Dell OpenManage Server Administrator index_main.htm DOM-based XSS
The version of Dell OpenManage Server Administrator hosted on the remote web server has a cross-site scripting vulnerability. Making a specially crafted request for indexmain.htm can result in client-side script injection. An attacker could exploit this by tricking a user into requesting a...
Dell OpenManage Server Administrator - Cross-Site Scripting
Dell OpenManage Server Administrator - Cross-Site Scripting source: https://www.securityfocus.com/bid/57212/info Dell OpenManage Server Administrator is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to...
Dell OpenManage Server Administrator version 7.1.0.1 DOM-based XSS vulnerability
Overview Dell OpenManage Server Administrator version 7.1.0.1 and earlier contains a DOM-based cross-site scripting vulnerability. Description CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'Dell OpenManage Server Administrator version 7.1.01 and earlier...
Dell OpenManage Server Administrator omalogin.html DOM-based XSS
The version of Dell OpenManage Server Administrator hosted on the remote web server has a cross-site scripting vulnerability. Making a specially crafted request for omalogin.html can result in client-side script injection. An attacker could exploit this by tricking a user into requesting a...
CVE-2012-4955
Dell OpenManage Server Administrator (OMSA) prior to 6.5.0.1, 7.0 prior to 7.0.0.1, and 7.1 prior to 7.1.0.1 contains a cross-site scripting (XSS) vulnerability. The Nessus entry specifies DOM-based XSS in omalogin.html and mentions a related vector in omatasks.html, enabling remote attackers to ...
CVE-2012-4955: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Dell OpenManage Server Administrator OMSA before 6.5.0.1, 7.0 before 7.0.0.1, and 7.1 before 7.1.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
PT-2012-5688
Name of the Vulnerable Software and Affected Versions Dell OpenManage Server Administrator versions prior to 6.5.0.1 Dell OpenManage Server Administrator versions 7.0 through 7.0.0.0 Dell OpenManage Server Administrator versions 7.1 through 7.1.0.0 Description A cross-site scripting XSS issue...
Dell OpenManage Server Administrator contains a cross-site scripting vulnerability
Overview Dell OpenManage Server Administrator version 7.1 and earlier contains a cross-site scripting vulnerability. Description Dell OpenManage Server Administrator version 7.1 and earlier contains a cross-site scripting vulnerability CWE-79. --- Impact A remote attacker may be able to execute...
Plesk Server Administrator (PSA) - locale Local File Inclusion
Plesk Server Administrator PSA - locale Local File Inclusion source: https://www.securityfocus.com/bid/40813/info Plesk Server Administrator PSA is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to...
Plesk Server Administrator (PSA) - 'locale' Local File Inclusion
source: https://www.securityfocus.com/bid/40813/info Plesk Server Administrator PSA is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrar...
Plesk Server Administrator (PSA) LFI Vulnerability - Active Check
Plesk Server Administrator PSA is prone to a local file include LFI vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...
Dell OpenManage Server Administrator 'HelpViewer' Redirect
Dell OpenManage Server Administrator appears to be installed on the remote host. The installed version fails to validate input passed to the 'file' parameter in '/servlet/HelpViewer' before redirecting an unauthenticated user to the location it specifies. An attacker may be able to exploit this...
conn. asp storm library law principles and applications-vulnerability warning-the black bar safety net
Today learn conn. asp storm database,this method is a very old method,it is through direct access to the database connection file conn. asp enables the server to produce the error,by returning the error information to storm out of the database the absolute path,here in conn. asp is the database...
On in the browser*. exe file the explore-exploit warning-the black bar safety net
On in the browser. exe file explore in depth A: really can in the browser command file? The answer is Yes. （Wow, cool! Can......） But don't happy, can only be performed server-side, but is must be authorized. Otherwise the server think the Black you're too easy. Who dares to look at me, I just...
