IPSwitch IMail Server WEB client 12.4 - Persistent Cross-Site Scripting

Exploit Title: IPSwitch IMail Server WEB client 12.4 persistent XSS Google Dork: Date: 3 june 2014 Exploit Author: Peru GoSecure! Vendor Homepage: www.ipswitch.com Software Link: http://www.imailserver.com/try/ Version: Tested on 12.3 and 12.4 before 12.4.1.15 Tested on: WindowsServer2008R2 STD S...

CVE-2014-3015

Cross-site request forgery CSRF vulnerability in the Web player in IBM Sametime Proxy Server and Web Client 9.0 through 9.0.0.1 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Web player in IBM Sametime Proxy Server and Web Client 9.0 through 9.0.0.1 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences...

CVE-2014-3015

CVE-2014-3015 affects IBM Sametime Proxy Server and Web Client 9.0 through 9.0.0.1. The Web player component is vulnerable to cross-site request forgery (CSRF), enabling remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences. The vulnerability orig...

PT-2014-5024

Name of the Vulnerable Software and Affected Versions IBM Sametime Proxy Server and Web Client versions 9.0 through 9.0.0.1 Description A cross-site request forgery CSRF issue exists in the Web player, allowing remote attackers to hijack the authentication of arbitrary users for requests that...

CVE-2014-3015: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Web player in IBM Sametime Proxy Server and Web Client 9.0 through 9.0.0.1 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences...

Cerberus FTP Server HTTP/S Web客户端安全限制绕过漏洞

Cerberus FTP Server是一款适用在Windows操作系统上的FTP服务程序。 Cerberus FTP Server 6.0.7之前版本在HTTP/S web客户端的实现上存在安全漏洞，可被恶意利用泄露服务器上的受限制访问资源。 0 Cerberus FTP Server 6.0.7 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.cerberusftp.com/...

CVE-2014-0336

The CVE-2014-0336 issue affects Serena Dimensions CM 12.2 Build 7.199.0 web client (and possibly earlier) and is caused by a cross-site request forgery (CSRF) vulnerability in the web client. An attacker can craft a malicious URI to perform actions in an administrator’s session via the user_new_m...

PT-2014-3567

Name of the Vulnerable Software and Affected Versions Serena Dimensions CM version 12.2 build 7.199.0 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the web client. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via various...

IBM Content Navigator访问绕过漏洞

Bugtraq ID:65856 CVE ID:CVE-2014-0858 IBM Content Navigator是一个Web客户机,用来向用户提供控制台以处理多个内容服务器中的内容。 IBM Content Navigator存在安全漏洞，允许通过验证的用户提交修改过的URL来绕过访问限制，进行deleteAction攻击。 0 IBM Content Navigator 2.x 厂商补丁： IBM ----- IBM Content Navigator 2.0.2.2-ICN-FP002已经修复该漏洞，建议用户下载更新：...

How to reinstall vSphere Web Client plug-in for Veeam Backup & Replication

Article Applicability This article is regarding the Local vSphere Client Plug-in only. Veeam Backup Enterprise Manager offers the following configurations of the vSphere Client plug-in: Local vSphere Client Plug-in -- For vSphere Client 7.0.0.x or earlier, the plug-in is installed locally on the...

Web Client Plug-in error: “invalid Single Sign-On token”

Challenge When a new user of the vSphere web client attempts to access the Veeam Web Client Plug-in, they encounter the following error: Server error: Failed to login to Veeam Backup Enterprise Manager. Login failed due to invalid Single Sign-On token Cause To successfully obtain statistics from...

CVE-2013-5422

The Web Client in IBM Rational ClearQuest 7.1 through 7.1.2.12, 8.0.0.x before 8.0.0.9, and 8.0.1.x before 8.0.1.2, when a multi-database dataset exists, allows remote attackers to read database names via unspecified vectors...

Code injection

The Web Client in IBM Rational ClearQuest 7.1 through 7.1.2.12, 8.0.0.x before 8.0.0.9, and 8.0.1.x before 8.0.1.2, when a multi-database dataset exists, allows remote attackers to read database names via unspecified vectors...

CVE-2013-5422

The Web Client in IBM Rational ClearQuest 7.1 through 7.1.2.12, 8.0.0.x before 8.0.0.9, and 8.0.1.x before 8.0.1.2, when a multi-database dataset exists, allows remote attackers to read database names via unspecified vectors...

CVE-2013-5422: Exposure of Sensitive Information to an Unauthorized Actor

The Web Client in IBM Rational ClearQuest 7.1 through 7.1.2.12, 8.0.0.x before 8.0.0.9, and 8.0.1.x before 8.0.1.2, when a multi-database dataset exists, allows remote attackers to read database names via unspecified vectors...

PT-2013-5534

Name of the Vulnerable Software and Affected Versions IBM Rational ClearQuest versions 7.1 through 7.1.2.12 IBM Rational ClearQuest versions 8.0.0.x before 8.0.0.9 IBM Rational ClearQuest versions 8.0.1.x before 8.0.1.2 Description The issue allows remote attackers to read database names via...

CVE-2013-5971

Session fixation vulnerability in the vSphere Web Client Server in VMware vCenter Server 5.0 before Update 3 allows remote attackers to hijack web sessions and gain privileges via unspecified vectors...

Session fixation

Session fixation vulnerability in the vSphere Web Client Server in VMware vCenter Server 5.0 before Update 3 allows remote attackers to hijack web sessions and gain privileges via unspecified vectors...

CVE-2013-5971

Session fixation vulnerability in the vSphere Web Client Server in VMware vCenter Server 5.0 before Update 3 allows remote attackers to hijack web sessions and gain privileges via unspecified vectors...