EUVD-2009-0807

Malware in sbrugna...

CVE-2009-0809

The Web Editor in Dassault Systemes ENOVIA SmarTeam V5 before Release 18 Service Pack 8, and possibly CATIA and other products, allows remote authenticated users to read the profile card of an object in the document class via a link that is sent from the owner of the document object...

IBM ENOVIA SmarTeam 'LoginPage.aspx' Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/38612/info IBM ENOVIA SmarTeam is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browse...

CVE-2010-0959

Cross-site scripting XSS vulnerability in WebEditor/Authentication/LoginPage.aspx in IBM ENOVIA SmarTeam 5 allows remote attackers to inject arbitrary web script or HTML via the errMsg parameter...

CVE-2010-0959

The CVE-2010-0959 entry concerns IBM ENOVIA SmarTeam 5, where a Cross-site scripting (XSS) vulnerability exists in WebEditor/Authentication/LoginPage.aspx. The issue allows remote attackers to inject arbitrary script or HTML via the errMsg parameter. Affected component is the LoginPage.aspx serve...

IBM ENOVIA SmarTeam 5 Cross Site Scripting Vulnerability

Exploit for unknown platform in category web applications ======================================================== IBM ENOVIA SmarTeam 5 Cross Site Scripting Vulnerability ======================================================== ===================== I. BACKGROUND ===================== ENOVIA...

IBM ENOVIA SmarTeam - LoginPage.aspx Cross-Site Scripting

IBM ENOVIA SmarTeam - LoginPage.aspx Cross-Site Scripting source: https://www.securityfocus.com/bid/38612/info IBM ENOVIA SmarTeam is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...

IBM ENOVIA SmarTeam 5 Cross Site Scripting

========================================= Yaniv Miron aka "Lament" Advisory March 7, 2010 IBM ENOVIA SmarTeam v5 Cross Site Scripting Vulnerability ========================================= ===================== I. BACKGROUND ===================== ENOVIA SmarTeam provides highly flexible product...

IBM ENOVIA SmarTeam - 'LoginPage.aspx' Cross-Site Scripting

source: https://www.securityfocus.com/bid/38612/info IBM ENOVIA SmarTeam is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

CVE-2009-0809

The Web Editor in Dassault Systemes ENOVIA SmarTeam V5 before Release 18 Service Pack 8, and possibly CATIA and other products, allows remote authenticated users to read the profile card of an object in the document class via a link that is sent from the owner of the document object...

Design/Logic Flaw

The Web Editor in Dassault Systemes ENOVIA SmarTeam V5 before Release 18 Service Pack 8, and possibly CATIA and other products, allows remote authenticated users to read the profile card of an object in the document class via a link that is sent from the owner of the document object...

CVE-2009-0809

The CVE-2009-0809 issue affects Dassault Systèmes ENOVIA SmarTeam V5 before Release 18 Service Pack 8 (and possibly CATIA/other products). The vulnerability allows remote authenticated users to read the profile card of a document-class object via a link sent by the document owner. The underlying ...

CVE-2009-0809

The Web Editor in Dassault Systemes ENOVIA SmarTeam V5 before Release 18 Service Pack 8, and possibly CATIA and other products, allows remote authenticated users to read the profile card of an object in the document class via a link that is sent from the owner of the document object...

CVE-2008-4581

The Editor in IBM ENOVIA SmarTeam 5 before release 18 SP5, and release 19 before SP01, allows remote authenticated users to bypass intended access restrictions and read Document objects via the Workflow Process aka Flow Process view...

Design/Logic Flaw

The Editor in IBM ENOVIA SmarTeam 5 before release 18 SP5, and release 19 before SP01, allows remote authenticated users to bypass intended access restrictions and read Document objects via the Workflow Process aka Flow Process view...

CVE-2008-4581

The Editor in IBM ENOVIA SmarTeam 5 before release 18 SP5, and release 19 before SP01, allows remote authenticated users to bypass intended access restrictions and read Document objects via the Workflow Process aka Flow Process view...

CVE-2008-4581

The Editor in IBM ENOVIA SmarTeam 5 before release 18 SP5, and release 19 before SP01, allows remote authenticated users to bypass intended access restrictions and read Document objects via the Workflow Process aka Flow Process view...

CVE-2008-4581

CVE-2008-4581 affects IBM ENOVIA SmarTeam Editor: 5.x before release 18 SP5 and 19.x before SP01. It allows remote authenticated users to bypass access restrictions and read Document objects via the Workflow Process (Flow Process) view. Root cause described as an access-control bypass on the Work...