Typo3 Backend XSS Vulnerability

An Information Disclosure vulnerability in jumpUrl mechanism, used to track access on web pages and provided files, allows a remote attacker to read arbitrary files on a host. The expected value of a mandatory hash secret, intended to invalidate such requests, is exposed to remote users allowing...

CVE-2014-3333

The server in Cisco Unity Connection 9.11 and 9.12 allows remote authenticated users to obtain privileged access by conducting an "HTTP Intercept" attack and leveraging the ability to read files within the context of the web-server user account, aka Bug ID CSCup41014...

PT-2014-5226

Name of the Vulnerable Software and Affected Versions Cisco Unity Connection versions 9.11 through 9.12 Description The issue allows remote authenticated users to gain privileged access by conducting an HTTP Intercept attack. This is achieved by leveraging the ability to read files within the...