CVE-2012-3096: Undefined Security Weakness

Cisco Unity Connection UC 7.1, 8.0, and 8.5 allows remote authenticated users to cause a denial of service resource consumption and administration outage via extended use of the product, aka Bug ID CSCtd79132...

CVE-2012-4259

Cross-site scripting XSS vulnerability in the contacts in 1 XPhone UC Web and the 2 web frontend for XPhone Virtual Directory in C4B XPhone Unified Communications UC 2011 Web 4.1.890S R1 allows remote attackers to inject arbitrary web script or HTML via the company name. NOTE: some of these detai...

Cross site scripting

Cross-site scripting XSS vulnerability in the contacts in 1 XPhone UC Web and the 2 web frontend for XPhone Virtual Directory in C4B XPhone Unified Communications UC 2011 Web 4.1.890S R1 allows remote attackers to inject arbitrary web script or HTML via the company name. NOTE: some of these detai...

CVE-2012-4259

Cross-site scripting XSS vulnerability in the contacts in 1 XPhone UC Web and the 2 web frontend for XPhone Virtual Directory in C4B XPhone Unified Communications UC 2011 Web 4.1.890S R1 allows remote attackers to inject arbitrary web script or HTML via the company name. NOTE: some of these detai...

CVE-2012-4259

CVE-2012-4259 affects C4B XPhone Unified Communications UC, specifically the XPhone UC Web/ web frontend for XPhone Virtual Directory (2011 Web 4.1.890S R1). The vulnerability is a cross-site scripting (XSS) issue allowing remote attackers to inject arbitrary script via the company name in the Co...

PT-2012-5287

Name of the Vulnerable Software and Affected Versions C4B XPhone Unified Communications UC 2011 Web version 4.1.890S R1 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the company name in the contacts. This could potentiall...

CVE-2012-4259: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the contacts in 1 XPhone UC Web and the 2 web frontend for XPhone Virtual Directory in C4B XPhone Unified Communications UC 2011 Web 4.1.890S R1 allows remote attackers to inject arbitrary web script or HTML via the company name. NOTE: some of these detai...

C4B XPhone UC Web 4.1.890S R1 - Cross Site Vulnerability

Title: ====== C4B XPhone UC Web 4.1.890S R1 - Cross Site Vulnerability Date: ===== 2012-04-24 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=484 VL-ID: ===== 484 Introduction: ============= XPhone Unified Communications 2011 ist die leistungsstarkste Telefonie- und...

C4B XPhone UC Web 4.1.890S R1 - Cross Site Vulnerability

Title: ====== C4B XPhone UC Web 4.1.890S R1 - Cross Site Vulnerability Date: ===== 2012-04-24 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=484 VL-ID: ===== 484 Introduction: ============= XPhone Unified Communications 2011 ist die leistungsstarkste Telefonie- und...

C4B XPhone UC Web 4.1.890S R1 XSS Vulnerability

Exploit for asp platform in category web applications Title: ====== C4B XPhone UC Web 4.1.890S R1 - Cross Site Vulnerability Introduction: ============= XPhone Unified Communications 2011 ist die leistungsstärkste Telefonie- und Kommunikationslösung von C4B. Sie ist leicht zu bedienen und...

C4B XPhone UC Web 4.1.890S R1 - Cross-Site Scripting

Title: ====== C4B XPhone UC Web 4.1.890S R1 - Cross Site Vulnerability Date: ===== 2012-04-24 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=484 VL-ID: ===== 484 Introduction: ============= XPhone Unified Communications 2011 ist die leistungsstärkste Telefonie- und...

C4B XPhone UC Web 4.1.890S R1 - Cross Site Vulnerability

Document Title: =============== C4B XPhone UC Web 4.1.890S R1 - Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=484 Release Date: ============= 2012-04-23 Vulnerability Laboratory ID VL-ID: ==================================== 48...

C4B XPhone UC Web 4.1.890S R1 - Cross Site Vulnerability

Document Title: =============== C4B XPhone UC Web 4.1.890S R1 - Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=484 Release Date: ============= 2012-04-23 Vulnerability Laboratory ID VL-ID: ==================================== 48...

perl multiple security vulnerabilities

Data injection and protection bypass in lc, lcfirst, uc, ucfirst functions and CGI module...

Ubuntu: Security Advisory (USN-1129-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Discuz! 1.5 跨站脚本攻击

简要描述： UC登陆页面存在跨站漏洞 详细说明： http://www.eisdl.com/bbs/ucserver/admin.php?m=user&a=login&iframe=&sid='%22%3E%3Ciframe%20src=http://www.pker.in%3E 漏洞证明： http://www.eisdl.com/bbs/ucserver/admin.php?m=user&a=login&iframe=&sid='%22%3E%3Ciframe%20src=http://www.pker.in%3E...

CVE-2011-1487

The 1 lc, 2 lcfirst, 3 uc, and 4 ucfirst functions in Perl 5.10.x, 5.11.x, and 5.12.x through 5.12.3, and 5.13.x through 5.13.11, do not apply the taint attribute to the return value upon processing tainted input, which might allow context-dependent attackers to bypass the taint protection...

PT-2011-1212

Name of the Vulnerable Software and Affected Versions Perl versions 5.10.x through 5.13.11 Description The issue is related to the lc, lcfirst, uc, and ucfirst functions in Perl, which do not apply the taint attribute to the return value when processing tainted input. This might allow attackers t...

CVE-2011-1487: Undefined Security Weakness

The 1 lc, 2 lcfirst, 3 uc, and 4 ucfirst functions in Perl 5.10.x, 5.11.x, and 5.12.x through 5.12.3, and 5.13.x through 5.13.11, do not apply the taint attribute to the return value upon processing tainted input, which might allow context-dependent attackers to bypass the taint protection...

Study Finds Popular Sites Guilty of Hi-Jacking History

A recent study launched by the UC San Diego Department of Computer Science to determine the scope of privacy-violating information flows at popular websites shows that popular Web 2.0 applications such as mashups, aggregators, and sophisticated ad targeting are teeming with various kinds of...