832 matches found
CVE-2013-0213
The Samba Web Administration Tool SWAT in Samba 3.x before 3.5.21, 3.6.x before 3.6.12, and 4.x before 4.0.2 allows remote attackers to conduct clickjacking attacks via a 1 FRAME or 2 IFRAME element...
Debian Security Advisory DSA 2617-1 (samba - several issues)
Jann Horn had reported two vulnerabilities in Samba, a popular cross-platform network file and printer sharing suite. In particular, these vulnerabilities affect to SWAT, the Samba Web Administration Tool. CVE-2013-0213: Clickjacking issue in SWAT An attacker can integrate a SWAT page into a...
DSA-2617-1 samba - several issues
Bulletin has no description...
Debian: Security Advisory (DSA-2617-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Cross-Site Request Forgery in SWAT
Description All current released versions of Samba are vulnerable to a cross-site request forgery in the Samba Web Administration Tool SWAT. By guessing a user's password and then tricking a user who is authenticated with SWAT into clicking a manipulated URL on a different web page, it is possibl...
Clickjacking in SWAT
Description All current released versions of Samba are vulnerable to clickjacking in the Samba Web Administration Tool SWAT. When the SWAT pages are integrated into a malicious web page via a frame or iframe and then overlaid by other content, an attacker could trick an administrator to potential...
SonicWALL Gms 6 - Arbitrary File Upload (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 /Apache-Coyote/ include...
SonicWALL GMS 6 Arbitrary File Upload
This module exploits a code execution flaw in SonicWALL GMS. It exploits two vulnerabilities in order to get its objective. An authentication bypass in the Web Administration interface allows to abuse the "appliance" application and upload an arbitrary payload embedded in a JSP. The module has be...
SonicWall Email Security crossite scripting
Crossite scripting in Web administration interface...
Multiple XSS vulnerabilities in Cerberus FTP Server <= 5.0.5.1 [CVE-2012-6339]
Overview =============== Cerberus FTP Server http://www.cerberusftp.com/ is a secure and reliable FTP server with many features and available functionality. It was discovered that the Web Administration interface has multiple persistent Cross Site Scripting XSS vulnerabilities. In the log viewer...
Oracle GlassFish Enterprise Server Multiple Stored XSS Vulnerabilities (CVE-2012-0551)
Multiple stored cross-site scripting vulnerabilities have been reported in the Oracle GlassFish web administration interface...
[SECURITY] Fedora 16 Update: phpMyAdmin-3.5.2.2-1.fc16
phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the World Wide Web. Most frequently used operations are supported by the user interface managing databases, tables, fields, relations, index es, users, permissions, while you still have the ability to directly...
Western Digital's WD TV Live SMP/Hub - Privilege Escalation
Introduction ============ The WD TV Live Streaming Media Player is a consumer device to play various audio and video formats. Additionally it allows access to multiple video streaming services like Netflix, Hulu or Youtube.1 The device allows customization of its user interface and limited remote...
IBM Tivoli Directory Server Web Administration Tool Unspecified XSS
According to its version, the IBM Tivoli Directory Server Web Administration Tool installed on the remote host is potentially affected by an unspecified cross-site scripting vulnerability. A remote attacker, exploiting this flaw, could potentially execute arbitrary script code in the user's brows...
IBM Tivoli Directory Server Web Administration Tool Detection
IBM Tivoli Directory Server Web Administration Tool, a web interface for managing IBM Tivoli Directory Server, was detected on the remote web server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid58815; scriptversion"1.6";...
CVE-2011-5078
CVE-2011-5078 affects Sybase M-Business Anywhere 6.7 before ESD#3 and 7.0 before ESD#7. The web administration interface does not require admin authentication for unspecified scripts, enabling remote authenticated users to list or delete user accounts, modify passwords, or read log files via HTTP...
membase-http-info NSE Script
Retrieves information hostname, OS, uptime, etc. from the CouchBase Web Administration port. The information retrieved by this script does not require any credentials. Script Arguments slaxml.debug See the documentation for the slaxml library. http.host, http.max-body-size, http.max-cache-size,...
[SECURITY] Fedora 15 Update: phpMyAdmin-3.4.7.1-1.fc15
phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the World Wide Web. Most frequently used operations are supported by the user interface managing databases, tables, fields, relations, index es, users, permissions, while you still have the ability to directly...
[SECURITY] Fedora 14 Update: phpMyAdmin-3.4.7-1.fc14
phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the World Wide Web. Most frequently used operations are supported by the user interface managing databases, tables, fields, relations, index =3D es, users, permissions, while you still have the ability to...