Metasploit Web UI 4.1.0 - Persistent Cross-Site Scripting

Advisory: Metasploit 4.1.0 Web UI stored XSS vulnerability Advisory ID: SSCHADV2011-033 Author: Stefan Schurtz Affected Software: Successfully tested on Metasploit Community Edition Vendor URL: http://metasploit.com/ Vendor Status: informed ========================== Vulnerability Description:...

Metasploit 4.1.0 Web UI Cross Site Scripting

Advisory: Metasploit 4.1.0 Web UI stored XSS vulnerability Advisory ID: SSCHADV2011-033 Author: Stefan Schurtz Affected Software: Successfully tested on Metasploit Community Edition Vendor URL: http://metasploit.com/ Vendor Status: informed ========================== Vulnerability Description:...

Metasploit 4.1.0 Web UI stored XSS Vulnerability

Exploit for multiple platform in category web applications Advisory: Metasploit 4.1.0 Web UI stored XSS vulnerability Advisory ID: SSCHADV2011-033 Author: Stefan Schurtz Affected Software: Successfully tested on Metasploit Community Edition Vendor URL: http://metasploit.com/ Vendor Status: inform...

CVE-2011-1357

Technical details about CVE-2011-1357 are not publicly available in the provided connected documents. Monitor for updates from official advisories.

When you open the nworks Web UI in a browser, you see a blank screen.

When you open the nworks Web UI in a browser, you see a blank screen instead of the logon screen/management screen. You may also see a Java exception stating that you need to add the site to the Trusted Sites zone...

CVE-2011-2606

Cross-site scripting XSS vulnerability in the Web UI in IBM Rational Team Concert RTC 3.0 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Work Item 165511...

CVE-2011-2606

Cross-site scripting XSS vulnerability in the Web UI in IBM Rational Team Concert RTC 3.0 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Work Item 165511...

CVE-2011-2606

IBM Rational Team Concert (RTC) 3.0 Web UI is affected by CVE-2011-2606, a Cross-site Scripting (XSS) flaw in the Web UI exploitable via an unspecified parameter (Work Item 165511). Root cause: unsafe handling of input in the affected page. Impact: remote attacker can inject arbitrary web script ...

CVE-2011-2606: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Web UI in IBM Rational Team Concert RTC 3.0 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Work Item 165511...

PT-2011-3955

Name of the Vulnerable Software and Affected Versions IBM Rational Team Concert RTC version 3.0 Description A cross-site scripting XSS issue exists in the Web UI, allowing remote attackers to inject arbitrary web script or HTML via an unspecified parameter. Recommendations For IBM Rational Team...

CVE-2011-1716

Multiple cross-site scripting XSS vulnerabilities in the Web UI in Xymon before 4.3.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-1716

Multiple cross-site scripting XSS vulnerabilities in the Web UI in Xymon before 4.3.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Web UI in Xymon before 4.3.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-1716

Multiple cross-site scripting XSS vulnerabilities in the Web UI in Xymon before 4.3.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-1716

CVE-2011-1716 concerns Xymon Monitor’s Web UI, where multiple XSS vulnerabilities exist in versions prior to 4.3.1. The description specifies that remote attackers can inject arbitrary web script or HTML via unspecified vectors, indicating the Web UI’s insufficient input/output handling as the ro...

CVE-2011-1716

Multiple cross-site scripting XSS vulnerabilities in the Web UI in Xymon before 4.3.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-1716

Multiple cross-site scripting XSS vulnerabilities in the Web UI in Xymon before 4.3.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2011-3316

Name of the Vulnerable Software and Affected Versions Xymon versions prior to 4.3.1 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the Web UI. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML, potentially leading to...

CVE-2011-1716: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Web UI in Xymon before 4.3.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Zolsoft Office Server Free Edition Cross Site Request Forgery

!--=============================================================================================== $$$$$$$\ $$\ $$\ $$\ $$$$$$\ $$ $$\ | $$ | $$ | $$ $$\ $$ | $$ |$$\ $$$$$$$\ $$$$$$\ $$$$$$$\ $$$$$$\ $$$$$$$\ $$$$$$\ $$ | $$ / $$ | $$$$$$$\ |$$ |$$ |$$ $$\ $$ $$\ $$ $$\ $$ $$\ $$ $$\ $$ |...