3 matches found
mcholste Enterprise Log Search and Archive Cross-Site Scripting Vulnerability
mcholste Enterprise Log Search and Archive ELSA is an enterprise log search and archive system. A cross-site scripting vulnerability exists in the index view in mcholste ELSA version 1205, commit 2cc17f1 and earlier. A remote attacker can leverage the 'type', 'name', and 'value' parameters in...
CVE-2018-1000029
mcholste Enterprise Log Search and Archive ELSA version revision 1205, commit 2cc17f1 and earlier contains a Cross Site Scripting XSS vulnerability in index view / that can result in . This attack appear to be exploitable via Payload delivered via the type, name, and value parameters of...
IBM Business Process Manager - User Account Reconfiguration
No description provided by source. Exploit Title: IBM BMPS BPM User account reconfiguration/Privilege Escalation/Information Disclosure Date: 31.01.14 Exploit Author: 0in Software link: http://www-03.ibm.com/software/products/en/business-process-manager-family/ Version: 8.0.1.1 newest versions ca...