8 matches found
VulnCheck KEV: CVE-2013-5912
VhttpdMgr in Thomson Reuters Velocity Analytics Vhayu Analytic Server 6.94 build 2995 allows remote attackers to execute arbitrary code via a URL in the fileName parameter during an importFile action...
CVE-2013-5912
VhttpdMgr in Thomson Reuters Velocity Analytics Vhayu Analytic Server 6.94 build 2995 allows remote attackers to execute arbitrary code via a URL in the fileName parameter during an importFile action...
CVE-2013-5912
The VhttpdMgr component in Thomson Reuters Velocity Analytics Vhayu Analytic Server version 6.94 build 2995 (and possibly earlier) is vulnerable to a Code Injection (CWE-94) vulnerability. A remote, unauthenticated attacker can craft a malicious URL using the importFile action and the fileName pa...
PT-2013-5865
Name of the Vulnerable Software and Affected Versions Thomson Reuters Velocity Analytics Vhayu Analytic Server version 6.94 build 2995 Description The issue allows remote attackers to execute arbitrary code via a URL in the fileName parameter during an importFile action. This is related to the...
CVE-2013-5912: Improper Control of Generation of Code
VhttpdMgr in Thomson Reuters Velocity Analytics Vhayu Analytic Server 6.94 build 2995 allows remote attackers to execute arbitrary code via a URL in the fileName parameter during an importFile action...
Thomson Reuters Velocity Analytics - Remote Code Injection
Thomson Reuters Velocity Analytics - Remote Code Injection source: https://www.securityfocus.com/bid/63880/info Thomson Reuters Velocity Analytics is prone to a vulnerability that lets attackers inject and execute arbitrary code. Successfully exploiting this issue may allow an attacker to upload...
Thomson Reuters Velocity Analytics Vhayu Analytic Server version 6.9.4 build 2995 contains a code injection vulnerability
Overview Thomson Reuters Velocity Analytics Vhayu Analytic Server version 6.94 build 2995 and possibly earlier versions contain a code injection vulnerability CWE-94. Description CWE-94:Improper Control of Generation of Code 'Code Injection' Thomson Reuters Velocity Analytics Vhayu Analytic Serve...
Thomson Reuters Velocity Analytics - Remote Code Injection
source: https://www.securityfocus.com/bid/63880/info Thomson Reuters Velocity Analytics is prone to a vulnerability that lets attackers inject and execute arbitrary code. Successfully exploiting this issue may allow an attacker to upload and execute arbitrary code with SYSTEM privileges. Thomson...