NGS00162 Patch Notification: Symantec Message Filter Session Hijacking via session fixation

High Risk Vulnerability in Symantec Message Filter 2 July 2012 Ben Williams of NCC Group has discovered a High risk vulnerability in Symantec Message Filter Impact: Session Hijacking via session fixation Versions affected: Symantec Message Filter Version 6.3 An updated version of the software has...

Symantec Message Filter session hijacking

No description provided...

CVE-2012-0301

Session fixation vulnerability in Brightmail Control Center in Symantec Message Filter 6.3 allows remote attackers to hijack web sessions via unspecified vectors...

Freeside SelfService CGI|API 2.3.3 Cross Site Scripting / SQL Injection

Title: ====== Freeside SelfService CGI|API 2.3.3 - Multiple Vulnerabilities Date: ===== 2012-06-14 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=614 VL-ID: ===== 614 Common Vulnerability Scoring System: ==================================== 6.5 Introduction:...

PT-2012-2477

Name of the Vulnerable Software and Affected Versions Symantec Message Filter version 6.3 Description A session fixation issue in the Brightmail Control Center component allows remote attackers to hijack web sessions. The exact vectors used for the attack are not specified. Recommendations For...

PT-2012-2479

Name of the Vulnerable Software and Affected Versions Symantec Message Filter version 6.3 Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities in the Brightmail Control Center component. These vulnerabilities allow remote attackers to hijack the authentication o...

Freeside SelfService CGI|API 2.3.3 - Multiple Vulnerabilities

Exploit for php platform in category web applications Title: ====== Freeside SelfService CGI|API 2.3.3 - Multiple Vulnerabilities Common Vulnerability Scoring System: ==================================== 6.5 Introduction: ============= Billing, ticketing, reporting and configuration for employees...

CLscript CMS v3.0 SQL Injection

Exploit for php platform in category web applications Title: ====== CLscript CMS v3.0 - Multiple Web Vulnerabilities Common Vulnerability Scoring System: ==================================== 8.6 Introduction: ============= With the professionally developed Classified-Portal CLscript 3.0 can...

AVAVoIP v1.5.12 - Multiple Web Vulnerabilities

Document Title: =============== AVAVoIP v1.5.12 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=437 Release Date: ============= 2012-06-28 Vulnerability Laboratory ID VL-ID: ==================================== 611 Common...

PT-2012-3996

Name of the Vulnerable Software and Affected Versions Apache Roller versions prior to 5.0.1 Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities in the admin/editor console. These vulnerabilities allow remote attackers to hijack the authentication of admins or...

SMF Board v2.0.2 - Multiple Web Vulnerabilities

Document Title: =============== SMF Board v2.0.2 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=596 Release Date: ============= 2012-06-25 Vulnerability Laboratory ID VL-ID: ==================================== 624 Common...

PBBoard v2.1.4 CMS - Multiple Web Vulnerabilities

Document Title: =============== PBBoard v2.1.4 CMS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=623 Release Date: ============= 2012-06-25 Vulnerability Laboratory ID VL-ID: ==================================== 625 Commo...

GLSA-201206-24 : Apache Tomcat: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201206-24 Apache Tomcat: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Apache Tomcat. Please review the CVE identifiers referenced below for details. Impact : The vulnerabilities allow an attacker to...

SMF Board v2.0.2 - Multiple Web Vulnerabilities

Document Title: =============== SMF Board v2.0.2 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=596 Release Date: ============= 2012-06-25 Vulnerability Laboratory ID VL-ID: ==================================== 624 Common...

Syneto EMail Protection v1.5.1 - Multiple Web Vulnerabilities

Document Title: =============== Syneto EMail Protection v1.5.1 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=547 Release Date: ============= 2012-06-24 Vulnerability Laboratory ID VL-ID: ==================================...

VamCart v0.9 CMS - Multiple Web Vulnerabilities

Document Title: =============== VamCart v0.9 CMS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=622 Release Date: ============= 2012-06-24 Vulnerability Laboratory ID VL-ID: ==================================== 622 Common...

VamCart v0.9 CMS - Multiple Web Vulnerabilities

Document Title: =============== VamCart v0.9 CMS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=622 Release Date: ============= 2012-06-24 Vulnerability Laboratory ID VL-ID: ==================================== 622 Common...

Anantasoft Gazelle CMS 1.0 Cross Site Scripting

/. /\ /\ /\ /\ / / // | | \ \ \ \ / / / /// / // / / / /// / // | / / \ | | | has ranked 2nd in the CMS Awards Popular Awards in the category SEO 2008. Anantasoft Gaselle CMS 1.0 is vulnerable to stored xss due to improper...

WebTitan v 3.62 - Multiple Cross Site Vulnerabilities

Document Title: =============== WebTitan v 3.62 - Multiple Cross Site Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=589 Release Date: ============= 2012-06-19 Vulnerability Laboratory ID VL-ID: ==================================== 589...

iBoutique eCommerce 4.0 SQL Injection / Cross Site Scripting

Title: ====== iBoutique eCommerce v4.0 - Multiple Web Vulnerabilites Date: ===== 2012-06-09 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=594 VL-ID: ===== 594 Common Vulnerability Scoring System: ==================================== 8 Introduction: =============...