5180 matches found
CVE-2009-3585
Session fixation vulnerability in html/Elements/SetupSessionCookie in Best Practical Solutions RT 3.0.0 through 3.6.9 and 3.8.x through 3.8.5 allows remote attackers to hijack web sessions by setting the session identifier via a manipulation that leverages a second web server within the same doma...
CVE-2009-3585
CVE-2009-3585 concerns a session fixation vulnerability in Best Practical Solutions RT 3.0.0–3.6.9 and 3.8.x–3.8.5, in the SetupSessionCookie flow (html/Elements/SetupSessionCookie). The underlying issue allows remote attackers to hijack a user’s web session by manipulating the session identifier...
CVE-2009-4151
CVE-2009-4151 describes a session fixation vulnerability in Best Practical Solutions RT, affecting RT 3.0.0–3.6.9 and RT 3.8.x up to 3.8.5. The issue arises in the SetupSessionCookie path where an attacker can influence the session identifier via HTTP access to the RT server, enabling potential s...
CVE-2009-4151: Improper Authentication
Session fixation vulnerability in html/Elements/SetupSessionCookie in Best Practical Solutions RT 3.0.0 through 3.6.9 and 3.8.x through 3.8.5 allows remote attackers to hijack web sessions by setting the session identifier via a manipulation that leverages "HTTP access to the RT server," a relate...
CVE-2009-3585: Improper Authentication
Session fixation vulnerability in html/Elements/SetupSessionCookie in Best Practical Solutions RT 3.0.0 through 3.6.9 and 3.8.x through 3.8.5 allows remote attackers to hijack web sessions by setting the session identifier via a manipulation that leverages a second web server within the same doma...
SAP AG SAPgui EAI WebViewer3D Buffer Overflow
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'SAP AG SAPgui EAI...
Cross site scripting
Cross-site scripting XSS vulnerability in Best Practical Solutions RT 3.6.x before 3.6.9, 3.8.x before 3.8.5, and other 3.4.6 through 3.8.4 versions allows remote attackers to inject arbitrary web script or HTML via certain Custom Fields...
CVE-2009-3892
Cross-site scripting XSS vulnerability in Best Practical Solutions RT 3.6.x before 3.6.9, 3.8.x before 3.8.5, and other 3.4.6 through 3.8.4 versions allows remote attackers to inject arbitrary web script or HTML via certain Custom Fields...
CVE-2009-3892
Cross-site scripting XSS vulnerability in Best Practical Solutions RT 3.6.x before 3.6.9, 3.8.x before 3.8.5, and other 3.4.6 through 3.8.4 versions allows remote attackers to inject arbitrary web script or HTML via certain Custom Fields...
CVE-2009-3892
The CVE-2009-3892 entry corresponds to a cross-site scripting (XSS) vulnerability in Best Practical Solutions RT (Request Tracker) releases in the 3.x line. Versions affected include RT 3.4.6–3.8.4, RT 3.6.x through 3.6.8, and RT 3.8.x through 3.8.4. The root cause is improper handling of input i...
CVE-2009-3892: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Best Practical Solutions RT 3.6.x before 3.6.9, 3.8.x before 3.8.5, and other 3.4.6 through 3.8.4 versions allows remote attackers to inject arbitrary web script or HTML via certain Custom Fields...
HP StorageWorks Storage Mirroring Double Take Service Code Execution (CVE-2008-1661)
HP StorageWorks is a collection of storage solutions from Hewlett Packard. These solutions include online storage, nearline storage, storage networking , archiving, and storage software. One of the storage software solutions is the Storage Mirroring Software. HP StorageWorks Storage Mirroring...
JVN#33822756 Canon IT Solutions Inc. ACCESSGUARDIAN vulnerable to cross-site scripting
Canon IT Solutions Inc. ACCESSGUARDIAN is a web security gateway. ACCESSGUARDIAN contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the latest version according to the information provided by...
OSSIM 2.1 - SQL Injection Cross-Site Scripting
OSSIM 2.1 - SQL Injection Cross-Site Scripting OSSIM - Open Source Security Information Management is vulnerable to multiple security vulnerabilities. 1. SQL Injections 2. Linked XSS 3. Unauthorized access Digital Security Research Group DSecRG Advisory DSECRG-09-055 Application: OSSIM Versions...
CMScontrol 7.x SQL Injection
=Info======================================================================= Software: CMScontrol Content Management Portal Solutions Sql Injection Version: 7. Vulnerability: Remote Sql Injection Google Dork: "index.php?idmenu=" CMScontrol Off. site: www.cmscontrol.com...
CMScontrol (Content Management Portal Solutions) - SQL Injection
CMScontrol Content Management Portal Solutions - SQL Injection =Info======================================================================= Software: CMScontrol Content Management Portal Solutions Sql Injection Version: 7. Vulnerability: Remote Sql Injection Google Dork: "index.php?idmenu="...
CMScontrol (Content Management Portal Solutions) - SQL Injection
=Info======================================================================= Software: CMScontrol Content Management Portal Solutions Sql Injection Version: 7. Vulnerability: Remote Sql Injection Google Dork: "index.php?idmenu=" CMScontrol Off. site: www.cmscontrol.com...
ZanfiCmsLite多个安全漏洞
ZanfiCmsLite存在多个漏洞，远程攻击者可以利用这些漏洞获得路径信息或执行任意命令。 第一个漏洞是路径泄露漏洞，提交类似如下请求： http://localhost/cms/admpages.php 可返回包含路径信息的错误消息： Warning: mysqlquery: supplied argument is not a valid MySQL-Link resource in \ c:\appserv\www\cms\admpages.php on line 2 No blocks in the table...
Dnsmasq Heap Overflow and Null-pointer Dereference on TFTP Server
1. Advisory Information Title: Dnsmasq Heap Overflow and Null-pointer Dereference on TFTP Server Advisory ID: CORE-2009-0820 Advisory URL:http://www.coresecurity.com/core-labs/advisories/dnsmasq-vulnerabilities Date published: 2009-08-31 Date of last update: 2009-08-31 Vendors contacted: Simon...
Open Auto Classifieds 1.5.9 - Multiple Vulnerabilities
Open Auto Classifieds 1.5.9 - Multiple Vulnerabilities MorningStar Security - Advisory http://www.morningstarsecurity.com/ Multiple security issues in Open Auto Classifieds 1. Advisory Information ---------------------------------------------------------------------------------------------- Title...