417 matches found
CVE-2011-5050
SQL injection vulnerability in corporate/Controller in Elitecore Technologies Cyberoam UTM before 10.01.2 build 059 allows remote authenticated administrators to execute arbitrary SQL commands via the tableid parameter. NOTE: some of these details are obtained from third party information...
CVE-2011-5050
An active CVE describes an SQL injection in Elitecore Technologies’ Cyberoam UTM (corporate/Controller) prior to version 10.01.2 build 059. The vulnerability allows remote authenticated administrators to inject arbitrary SQL via the tableid parameter, enabling potential data exposure or modificat...
Cyberoam UTM Application CR300i / CR500i v10 SQL Injection
Title: ====== Cyberoam UTM Appliance - SQL Injection Vulnerability Date: ===== 2011-12-19 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=60 VL-ID: ===== 60 Introduction: ============= Small and medium enterprises are as much at risk as large enterprises from the target...
Cyberoam UTM 10 - tableid SQL Injection
Cyberoam UTM 10 - tableid SQL Injection source: https://www.securityfocus.com/bid/51143/info Cyberoam UTM is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...
Cyberoam UTM 10 - 'tableid' SQL Injection
source: https://www.securityfocus.com/bid/51143/info Cyberoam UTM is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...
Cyberoam UTM Appliance - SQL Injection Vulnerability
Document Title: =============== Cyberoam UTM Appliance - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=60 Release Date: ============= 2011-12-18 Vulnerability Laboratory ID VL-ID: ==================================== 60...
Cyberoam UTM Appliance - SQL Injection Vulnerability
Document Title: =============== Cyberoam UTM Appliance - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=60 Release Date: ============= 2011-12-18 Vulnerability Laboratory ID VL-ID: ==================================== 60...
Check Point UTM-1 Edge and Safe 8.2.43 - Multiple Vulnerabilities
Check Point UTM-1 Edge and Safe 8.2.43 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/50189/info Check Point UTM-1 Edge and Safe are prone to multiple security vulnerabilities, including: 1. Multiple cross-site scripting vulnerabilities 2. Multiple HTML-injection...
Check Point UTM-1 Edge and Safe 8.2.43 - Multiple Vulnerabilities
source: https://www.securityfocus.com/bid/50189/info Check Point UTM-1 Edge and Safe are prone to multiple security vulnerabilities, including: 1. Multiple cross-site scripting vulnerabilities 2. Multiple HTML-injection vulnerabilities 3. Multiple cross-site request forgery vulnerabilities 4...
Multiple vulnerabilities in Web GUI of UTM-1 Edge, Safe@Office and ZoneAlarm appliances
...
McAfee UTM Firewall Appliance - Multiple Web Vulnerbilities
Document Title: =============== McAfee UTM Firewall Appliance - Multiple Web Vulnerbilities References Source: ==================== MFE-UTM-20100429-01 - McAfee Unified Threat Management UTM Firewall Appliance - 6.8.6 build 6257 Release Date: ============= 2011-08-11 Vulnerability Laboratory ID...
McAfee UTM Firewall Appliance - Multiple Web Vulnerbilities
Document Title: =============== McAfee UTM Firewall Appliance - Multiple Web Vulnerbilities References Source: ==================== MFE-UTM-20100429-01 - McAfee Unified Threat Management UTM Firewall Appliance - 6.8.6 build 6257 Release Date: ============= 2011-08-11 Vulnerability Laboratory ID...
Elitecore Cyberoam UTM crossite scripting
Crossite scripting in Web interface...
Cyberoam UTM - Multiple Cross-Site Scripting Vulnerabilities
Cyberoam UTM - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/48814/info Cyberoam UTM is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute...
Elitecore Cyberoam UTM Cross Site Scripting
Elitecore Cyberoam UTM - Authenticated Cross-Site Scripting Vulnerability http://www.osisecurity.com.au/advisories/cyberoam-authenticated-cross-site-scripting Release Date: 20-Jul-2011 Software: Elitecore Technologies - Cyberoam http://www.cyberoam.com/ "Cyberoam Unified Threat Management...
Cyberoam UTM - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/48814/info Cyberoam UTM is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user i...
Cross Site Scripting - Dokumentation, Analyse & Techniken
Document Title: =============== Cross Site Scripting - Dokumentation, Analyse & Techniken References: =========== https://www.vulnerability-lab.com/resources/documents/198.pdf https://de.wikipedia.org/wiki/Cross-SiteScriptingWeblinks ; Release Date: ============= 2011-07-19 Vulnerability Laborato...
CVE-2010-2290
Cross-site scripting XSS vulnerability in cgi-bin/cgix/help in McAfee Unified Threat Management UTM Firewall formerly SnapGear firmware 3.0.0 through 4.0.6 allows remote attackers to inject arbitrary web script or HTML via the page parameter...
CVE-2010-2290
CVE-2010-2290 affects McAfee Unified Threat Management (UTM) Firewall (formerly SnapGear) firmware 3.0.0–4.0.6. The vulnerability is a Cross-site Scripting (XSS) in the web interface, triggered by the page parameter sent to cgi-bin/cgix/help, enabling remote attackers to inject arbitrary web scri...