Kayako Fusion v4.51.1891 - Multiple Web Vulnerabilities

Document Title: =============== Kayako Fusion v4.51.1891 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=824 ID: SWIFT-3119 URL: http://dev.kayako.com/browse/SWIFT-3119 Release Date: ============= 2013-01-21 Vulnerability...

CVE-2012-6494 - Nexpose Security Console - Session Hijacking

Product: Nexpose Security Console Vendor: Rapid7 Version: 5.5.3 Tested Version: 5.5.1 Vendor Notified Date: December 19, 2012 Release Date: January 2, 2013 Risk: Medium Authentication: Access to logs required. Remote: Yes Description: Due to a flaw in the way the Nexpose Security Console logs...

Nexpose Security Console Session Capture

Product: Nexpose Security Console Vendor: Rapid7 Version: ’ is replaced by ‘nexposeCCSessionID=;time-zone-offset=000. 5. Success. Vendor Notified: Yes Vendor Response: Quickly escalated and resolved. Vendor Update: Remediated in 5.5.4. Reference: CVE-2012-6494...

Rugged Operating System Web UI Multiple Security Vulnerabilities

Rugged Operating System is prone to multiple security vulnerabilities including: 1. A session-hijacking vulnerability 2. An unauthorized-access vulnerability SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

SonicWall Email Security 7.4.1.x - Persistent Web Vulnerability

Title: ====== SonicWall Email Security 7.4.1.x - Persistent Web Vulnerability Date: ===== 2012-12-21 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=768 VL-ID: ===== 768 Common Vulnerability Scoring System: ==================================== 4.1 Introduction:...

e107 v1.0.1 CSRF Resulting in Arbitrary Javascript Execution

Exploit for php platform in category web applications Exploit Title: e107 v1.0.1 Administrator CSRF Resulting in Arbitrary Javascript Execution Google Dork: intext:"This site is powered by e107" Date: 01/01/13 Exploit Author: Joshua Reynolds Vendor Homepage: http://e107.org Software Link:...

SonicWall Email Security 7.4.1.x - Persistent Vulnerability

Document Title: =============== SonicWall Email Security 7.4.1.x - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=768 Release Date: ============= 2012-12-21 Vulnerability Laboratory ID VL-ID: ====================================...

SonicWall Email Security 7.4.1.x - Persistent Vulnerability

Document Title: =============== SonicWall Email Security 7.4.1.x - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=768 Release Date: ============= 2012-12-21 Vulnerability Laboratory ID VL-ID: ====================================...

Enterpriser16 Load Balancer 7.1 - Multiple Cross-Site Scripting Vulnerabilities

Title: ====== Enterpriser16 Load Balancer v7.1 - Multiple Web Vulnerabilities Date: ===== 2012-12-12 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=785 VL-ID: ===== 785 Common Vulnerability Scoring System: ==================================== 3.5 Introduction:...

Enterpriser16 LB v7.1 - Multiple Web Vulnerabilities

Document Title: =============== Enterpriser16 LB v7.1 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=785 Release Date: ============= 2012-12-11 Vulnerability Laboratory ID VL-ID: ==================================== 785...

Manage Engine Exchange Reporter v4.1 - Multiple Web Vulnerabilites

Title: ====== Manage Engine Exchange Reporter v4.1 - Multiple Web Vulnerabilites Date: ===== 2012-11-14 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=688 VL-ID: ===== 688 Common Vulnerability Scoring System: ==================================== 4.5 Introduction:...

SonicWALL CDP 5040 v6.x - Multiple Web Vulnerabilities

Title: ====== SonicWALL CDP 5040 v6.x - Multiple Web Vulnerabilities Date: ===== 2012-11-19 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=549 VL-ID: ===== 549 Common Vulnerability Scoring System: ==================================== 3.5 Introduction: =============...

Skype Community Username Cross Site Scripting

Title: ====== Skype Community - Mail Encoding Web Vulnerability 2 Date: ===== 2012-11-21 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=719 VL-ID: ===== 719 Common Vulnerability Scoring System: ==================================== 4 Introduction: ============= Skype is...

PT-2012-5821

Name of the Vulnerable Software and Affected Versions BIGACE versions prior to 2.7.8 Description A session fixation issue allows remote attackers to hijack web sessions. The exact vectors used for the attack are not specified. Recommendations For versions prior to 2.7.8, update to version 2.7.8 o...

CVE-2012-5173: Undefined Security Weakness

Session fixation vulnerability in BIGACE before 2.7.8 allows remote attackers to hijack web sessions via unspecified vectors...

ManageEngine ServiceDesk 8.0 - Multiple Vulnerabilities

ManageEngine ServiceDesk 8.0 - Multiple Vulnerabilities Title: ====== ManageEngine ServiceDesk 8.0 - Multiple Vulnerabilities Date: ===== 2012-11-15 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=689 VL-ID: ===== 689 Common Vulnerability Scoring System:...

ManageEngine ServiceDesk 8.0 - Multiple Vulnerabilities

Title: ====== ManageEngine ServiceDesk 8.0 - Multiple Vulnerabilities Date: ===== 2012-11-15 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=689 VL-ID: ===== 689 Common Vulnerability Scoring System: ==================================== 3.5 Introduction: =============...

SonicWALL CDP 5040 6.x - Multiple Vulnerabilities

SonicWALL CDP 5040 6.x - Multiple Vulnerabilities Title: ====== SonicWALL CDP 5040 v6.x - Multiple Web Vulnerabilities Date: ===== 2012-11-19 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=549 VL-ID: ===== 549 Common Vulnerability Scoring System:...

Skype Community - Mail Encoding Web Vulnerability #2

Document Title: =============== Skype Community - Mail Encoding Web Vulnerability 2 References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=719 MICROSOFT SECURITY RESPONSE CENTER MSRC ID: 13022 & 13034 Release Date: ============= 2012-11-20 Vulnerability...

SonicWALL CDP 5040 6.x Cross Site Scripting

Title: ====== SonicWALL CDP 5040 v6.x - Multiple Web Vulnerabilities Date: ===== 2012-11-19 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=549 VL-ID: ===== 549 Common Vulnerability Scoring System: ==================================== 3.5 Introduction: =============...