8 matches found
EUVD-2008-6607
Malware in sbrugna...
CVE-2008-6645
Cross-site scripting XSS vulnerability in Opencosmo VisualSentinel 0.7 allows remote attackers to inject arbitrary web script or HTML via the User-Agent header $SERVER 'HTTPUSERAGENT', which is not properly handled when displaying log files...
Cross site scripting
Cross-site scripting XSS vulnerability in Opencosmo VisualSentinel 0.7 allows remote attackers to inject arbitrary web script or HTML via the User-Agent header $SERVER 'HTTPUSERAGENT', which is not properly handled when displaying log files...
CVE-2008-6645
Cross-site scripting XSS vulnerability in Opencosmo VisualSentinel 0.7 allows remote attackers to inject arbitrary web script or HTML via the User-Agent header $SERVER 'HTTPUSERAGENT', which is not properly handled when displaying log files...
CVE-2008-6645
Opencosmo VisualSentinel 0.7 contains an XSS vulnerability when processing the User-Agent header ($_SERVER['HTTP_USER_AGENT']), which is displayed in log files. This could allow injection of arbitrary script/HTML. The NVD reports CVSSv2 base score 4.3 (MEDIUM). No remediation details are provided...
CVE-2008-6645: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Opencosmo VisualSentinel 0.7 allows remote attackers to inject arbitrary web script or HTML via the User-Agent header $SERVER 'HTTPUSERAGENT', which is not properly handled when displaying log files...
visualsentinel-cas.txt
VisualSentinel 0.7 Cross Agent Scripting Discovered by: Alfredo Panzera, Opencosmo Security Software vendor: http://www.opencosmo.com Date: 31-05-2008 Vulnerability: The vulnerability consists on inject javascript code falsify the user agent's attacker during an attack and then save in the log th...
VisualSentinel 0.7 Cross Agent Scripting Vulnerability
VisualSentinel 0.7 Cross Agent Scripting Discovered by: Alfredo Panzera, Opencosmo Security Software vendor: http://www.opencosmo.com Date: 31-05-2008 Vulnerability: The vulnerability consists on inject javascript code falsify the user agent's attacker during an attack and then save in the log th...