8 matches found
EUVD-2012-1045
Malware in sbrugna...
Linux Distros Unpatched Vulnerability : CVE-2019-14511
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sphinx Technologies Sphinx 3.1.1 by default has no authentication and listens on 0.0.0.0, making it exposed to the internet unless filtered by a firewall or...
CVE-2012-1005
Multiple cross-site scripting XSS vulnerabilities in Sphinx Software Mobile Web Server 3.1.2.47 allow remote attackers to inject arbitrary web script or HTML via the comment parameter to a blog, as demonstrated using 1 Blog/MyFirstBlog.txt or 2 Blog/AboutSomething.txt...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Sphinx Software Mobile Web Server 3.1.2.47 allow remote attackers to inject arbitrary web script or HTML via the comment parameter to a blog, as demonstrated using 1 Blog/MyFirstBlog.txt or 2 Blog/AboutSomething.txt...
CVE-2012-1005
CVE-2012-1005 affects Sphinx Mobile Web Server
CVE-2012-1005
Multiple cross-site scripting XSS vulnerabilities in Sphinx Software Mobile Web Server 3.1.2.47 allow remote attackers to inject arbitrary web script or HTML via the comment parameter to a blog, as demonstrated using 1 Blog/MyFirstBlog.txt or 2 Blog/AboutSomething.txt...
PT-2012-3009
Name of the Vulnerable Software and Affected Versions Sphinx Software Mobile Web Server version 3.1.2.47 Description The issue allows remote attackers to inject arbitrary web script or HTML via the comment parameter to a blog. This can be demonstrated using specific blog files, such as...
CVE-2012-1005: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Sphinx Software Mobile Web Server 3.1.2.47 allow remote attackers to inject arbitrary web script or HTML via the comment parameter to a blog, as demonstrated using 1 Blog/MyFirstBlog.txt or 2 Blog/AboutSomething.txt...