Password Vault Web Access vulnerable to cross-site scripting

Overview Password Vault Web Access PVWA provided by Cyber-Ark Software, Ltd. contains a cross-site scripting vulnerability. Password Vault Web Access PVWA is a module in the Privileged Identity Management Suite that allows access via a web portal. PVWA contains a cross-site scripting vulnerabilit...

CVE-2010-2779

Cross-site scripting XSS vulnerability in WebAccess in Novell GroupWise 8.x before 8.0 SP2 allows remote attackers to inject arbitrary web script or HTML via a crafted message, related to "replies."...

MS KB2401593: Microsoft Outlook Web Access (OWA) CSRF

The remote host is running a version of Outlook Web Access OWA for Exchange Server that is affected by a cross-site request forgery vulnerability. By tricking an authenticated user to click on a link to a specially crafted web page, it may be possible for an attacker to perform unauthorized actio...

JVN#35605523: Cross-site scripting vulnerability in Access Analyzer CGI by futomi's CGI Cafe

Access Analyzer CGI provided by futomi's CGI Cafe is a software to analyze web access logs. Access Analyzer CGI contains a cross-site scripting vulnerability. This is caused by a particular method in which tags are embedded into the web page. Impact An arbitrary script may be executed on the user...

CVE-2010-3213

Cross-site request forgery CSRF vulnerability in Microsoft Outlook Web Access owa/ev.owa 2007 through SP2 allows remote attackers to hijack the authentication of e-mail users for requests that perform Outlook requests, as demonstrated by setting the auto-forward rule...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Microsoft Outlook Web Access owa/ev.owa 2007 through SP2 allows remote attackers to hijack the authentication of e-mail users for requests that perform Outlook requests, as demonstrated by setting the auto-forward rule...

CVE-2010-3213

CVE-2010-3213 is a CSRF in Microsoft Outlook Web Access (OWA) for Exchange Server 2007–SP2. The vulnerability allows an authenticated user to be tricked into performing Outlook actions (e.g., creating or modifying outbound rules) via forged requests, hijacking the user’s session in the OWA contex...

CVE-2010-3213

Cross-site request forgery CSRF vulnerability in Microsoft Outlook Web Access owa/ev.owa 2007 through SP2 allows remote attackers to hijack the authentication of e-mail users for requests that perform Outlook requests, as demonstrated by setting the auto-forward rule...

Outlook Web Access 2003 CSRF Vulnerability

Exploit for windows platform in category web applications ========================================== Outlook Web Access 2003 CSRF Vulnerability ========================================== Exploit Title: Microsoft Office Outlook Web Access for Exchange Server 2003 XSRF Vulnerability Date: 07/20/201...

Outlook Web Access 2003 Cross Site Request Forgery

Exploit Title: Microsoft Office Outlook Web Access for Exchange Server 2003 XSRF Vulnerability Date: 07/20/2010 Author: anonymous Tested on: Microsoft Office Outlook Web Access for Exchange Server 2003 A cross-site request forgery vulnerability in Microsoft Office Outlook Web Access for Exchange...

Outlook Web Access 2003 - Cross-Site Request Forgery

Exploit Title: Microsoft Office Outlook Web Access for Exchange Server 2003 XSRF Vulnerability Date: 07/20/2010 Author: anonymous Tested on: Microsoft Office Outlook Web Access for Exchange Server 2003 A cross-site request forgery vulnerability in Microsoft Office Outlook Web Access for Exchange...

Microsoft Outlook Web Access for Exchange Server 2003 - Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/41843/info Microsoft Outlook Web Access for Exchange Server 2003 is prone to a cross-site request-forgery vulnerability. Exploiting this issue may allow a remote attacker to perform certain actions in the context of an authorized user's session and gain...

Outlook Web Access 2007 - Cross-Site Request Forgery

Outlook Web Access 2007 - Cross-Site Request Forgery Source: http://sites.google.com/site/tentacoloviola/pwning-corporate-webmails Demo: http://www.youtube.com/watch?v=Bx-zfu0uXYg After Nduja Connection worm and the Memova issue, it's now time to shed a light on vulnerabilities affecting corporat...

iphone/ipod discover the File Manager web service directory traversal vulnerability-vulnerability warning-the black bar safety net

from:Xeye Team discover is an iphone/ipod touch platform on the popular file Manager, can read pdf/office/txt format files And via wifi to share these files, a detailed description look at this: http://itunes.apple.com/us/app/discover/id292416855?mt=8 Vulnerability analysis When the wifi...

Netgear WG602v4 router buffer overflow

Buffer overflow during web access authentication...

CVE-2010-2091

Microsoft Outlook Web Access OWA 8.2.254.0, when Internet Explorer 7 on Windows Server 2003 is used, does not properly handle the id parameter in a Folder IPF.Note action to the default URI, which might allow remote attackers to obtain sensitive information or conduct cross-site scripting XSS...

Cross site scripting

Microsoft Outlook Web Access OWA 8.2.254.0, when Internet Explorer 7 on Windows Server 2003 is used, does not properly handle the id parameter in a Folder IPF.Note action to the default URI, which might allow remote attackers to obtain sensitive information or conduct cross-site scripting XSS...

CVE-2010-2091

Microsoft Outlook Web Access OWA 8.2.254.0, when Internet Explorer 7 on Windows Server 2003 is used, does not properly handle the id parameter in a Folder IPF.Note action to the default URI, which might allow remote attackers to obtain sensitive information or conduct cross-site scripting XSS...

CVE-2010-2091

Microsoft Outlook Web Access (OWA) 8.2.254.0, when used with Internet Explorer 7 on Windows Server 2003, is vulnerable to issues with the id parameter in a Folder IPF.Note action to the default URI. This may allow remote attackers to obtain sensitive information or perform cross-site scripting (X...

Microsoft Outlook Web Access (OWA) version 8.2.254.0 information disclosure vulnerability

No description provided by source. $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ "Microsoft Outlook Web Access OWA version 8.2.254.0" OS: Windows Server 2003 Internet Explorer 7 $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ There is an information disclosure vulnerability in "Microsoft...