PHP Server Monitor Multiple Stored Cross-Site Scripting Vulnerabilities

PHP Server Monitor is prone to multiple stored cross-site scripting vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PHP Server Monitor Stored XSS Vulnerability

Exploit for php platform in category web applications Author: loneferret Product: PHP Server Monitor Version: 2.0.1 and maybe older versions Google Dork: intext="Powered by PHP Server Monitor v2.0.1" yes people have made this available on the web Software Download:...

PHP Server Monitor - Persistent Cross-Site Scripting

Author: loneferret of Offensive Security Product: PHP Server Monitor Version: 2.0.1 and maybe older versions Google Dork: intext="Powered by PHP Server Monitor v2.0.1" yes people have made this available on the web Software Download: http://sourceforge.net/projects/phpservermon/ Tested on: Ubuntu...

PHP Server Monitor Cross Site Scripting

Author: loneferret of Offensive Security Product: PHP Server Monitor Version: 2.0.1 and maybe older versions Google Dork: intext="Powered by PHP Server Monitor v2.0.1" yes people have made this available on the web Software Download: http://sourceforge.net/projects/phpservermon/ Tested on: Ubuntu...

PHP Server Monitor - Persistent Cross-Site Scripting

PHP Server Monitor - Persistent Cross-Site Scripting Author: loneferret of Offensive Security Product: PHP Server Monitor Version: 2.0.1 and maybe older versions Google Dork: intext="Powered by PHP Server Monitor v2.0.1" yes people have made this available on the web Software Download:...

Tembria Server Multiple Cross-Site Scripting and Information Disclosure Vulnerabilities

Tembria Server Monitor is prone to cross-site scripting and information disclosure vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2011-3684

Multiple cross-site scripting XSS vulnerabilities in Tembria Server Monitor before 6.0.5 Build 2252 allow remote attackers to inject arbitrary web script or HTML via 1 the siteid parameter to logbook.asp, 2 the siteid parameter to monitor-events.asp, 3 the siteid parameter to...

CVE-2011-3685

Tembria Server Monitor before 6.0.5 Build 2252 uses a substitution cipher to encrypt application credentials, which allows local users to obtain sensitive information by leveraging read access to 1 authentication.dat or 2 XML files in the Exports directory...

Directory traversal

Tembria Server Monitor before 6.0.5 Build 2252 uses a substitution cipher to encrypt application credentials, which allows local users to obtain sensitive information by leveraging read access to 1 authentication.dat or 2 XML files in the Exports directory...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Tembria Server Monitor before 6.0.5 Build 2252 allow remote attackers to inject arbitrary web script or HTML via 1 the siteid parameter to logbook.asp, 2 the siteid parameter to monitor-events.asp, 3 the siteid parameter to...

CVE-2011-3685

Tembria Server Monitor before 6.0.5 Build 2252 uses a substitution cipher to encrypt application credentials, which allows local users to obtain sensitive information by leveraging read access to 1 authentication.dat or 2 XML files in the Exports directory...

CVE-2011-3685

Tembria Server Monitor (before 6.0.5 Build 2252) is vulnerable due to a substitution cipher used to encrypt application credentials, enabling local users with read access to authentication.dat or exports XML files to obtain sensitive information. This CVE (CVE-2011-3685) affects the confidentiali...

CVE-2011-3684

Multiple cross-site scripting XSS vulnerabilities in Tembria Server Monitor before 6.0.5 Build 2252 allow remote attackers to inject arbitrary web script or HTML via 1 the siteid parameter to logbook.asp, 2 the siteid parameter to monitor-events.asp, 3 the siteid parameter to...

CVE-2011-3684

Tembria Server Monitor is affected by multiple XSS vulnerabilities (CVE-2011-3684) prior to version 6.0.5 Build 2252. The flaws allow remote attackers to inject arbitrary script/HTML via numerous parameters (e.g., siteid in logbook.asp, monitor-events.asp, reports-config-by-device.asp, and others...

CVE-2011-3685: Undefined Security Weakness

Tembria Server Monitor before 6.0.5 Build 2252 uses a substitution cipher to encrypt application credentials, which allows local users to obtain sensitive information by leveraging read access to 1 authentication.dat or 2 XML files in the Exports directory...

CVE-2011-3684: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Tembria Server Monitor before 6.0.5 Build 2252 allow remote attackers to inject arbitrary web script or HTML via 1 the siteid parameter to logbook.asp, 2 the siteid parameter to monitor-events.asp, 3 the siteid parameter to...

Tembria Server Monitor Weak Cryptographic Password Storage Vulnerability

Tembria Server Monitor Weak Cryptographic Password Storage Vulnerability Solutionary ID: SERT-VDN-1004 Solutionary Disclosure URL: http://www.solutionary.com/index/SERT/Vuln-Disclosures/Tembria-Server-Monitor-Weak-Xpto-Pwd-Storage.html CVE ID: Pending Product: Tembria Server Monitor Application...

Tembria Server Monitor security vulnerability

Weak cryptography, crossite scripting...

Tembria Server Monitor Detection

The remote Windows host is running Tembria Server Monitor. Tembria Server Monitor is a server- and network-monitoring application that contains a built-in web server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid46202; scriptversion"1.8"; scriptcvsdate"Date:...

Tembria Server Monitor < 5.6.1 Denial of Service

The remote host is running a version of Tembria Server Monitor earlier than 5.6.1. Such versions are reportedly affected by a buffer overflow vulnerability when handling specially crafted HTTP requests. An attacker, exploiting this flaw, could crash the affected service. C Tenable Network Securit...