CVE-2012-5763

CVE-2012-5763 affects IBM Netezza WebAdmin (WebAdmin 6.0.5, 6.0.8, and 7.0 before P2). The IBM bulletin documents a Cross-site request forgery (CSRF) flaw where requests may be accepted without proper authentication verification, potentially allowing remote attackers to hijack user sessions. Root...

CVE-2012-5762

CVE-2012-5762 affects IBM Netezza WebAdmin (versions 6.0.5, 6.0.8 and 7.0 before P2). The vulnerability is an XSS allowing remote authenticated users to inject arbitrary script/HTML via MHTML protocol vectors. IBM’s bulletin for this family notes multiple issues and lists CVE-2012-5762 among them...

CVE-2012-5761: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the WebAdmin application 6.0.5, 6.0.8, and 7.0 before P2 in IBM Netezza allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

PT-2013-1854

Name of the Vulnerable Software and Affected Versions IBM Netezza WebAdmin application versions 6.0.5, 6.0.8, and 7.0 before P2 Description The issue allows remote authenticated users to inject content and conduct phishing attacks via unspecified vectors. This is due to a cross-site scripting XSS...

CVE-2012-5763: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the WebAdmin application 6.0.5, 6.0.8, and 7.0 before P2 in IBM Netezza allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2012-5760: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the WebAdmin application 6.0.5, 6.0.8, and 7.0 before P2 in IBM Netezza allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

PT-2013-1838

Name of the Vulnerable Software and Affected Versions IBM Netezza WebAdmin application versions 6.0.5, 6.0.8, and 7.0 before P2 Description The issue is related to a cross-site scripting XSS vulnerability, which allows remote authenticated users to inject arbitrary web script or HTML. This can be...

PT-2013-1840

Name of the Vulnerable Software and Affected Versions IBM Netezza WebAdmin application versions 6.0.5, 6.0.8, and 7.0 before P2 Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack the authentication of victims via unknown vectors. Recommendations For...

PT-2013-1837

Name of the Vulnerable Software and Affected Versions IBM Netezza WebAdmin application versions 6.0.5, 6.0.8, and 7.0 before P2 Description The issue allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, which can lead to unauthorized access and data...

PT-2013-1839

Name of the Vulnerable Software and Affected Versions IBM Netezza WebAdmin application versions 6.0.5, 6.0.8, and 7.0 before P2 Description The issue is related to a cross-site scripting XSS vulnerability. This allows remote authenticated users to inject arbitrary web script or HTML via vectors...

CVE-2012-5941: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the WebAdmin application 6.0.5, 6.0.8, and 7.0 before P2 in IBM Netezza allows remote authenticated users to inject content, and conduct phishing attacks, via unspecified vectors...

CVE-2012-5762: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the WebAdmin application 6.0.5, 6.0.8, and 7.0 before P2 in IBM Netezza allows remote authenticated users to inject arbitrary web script or HTML via vectors involving the MHTML protocol...

PT-2013-1853

Name of the Vulnerable Software and Affected Versions IBM Netezza WebAdmin application versions 6.0.5, 6.0.8, and 7.0 before P2 Description The issue allows remote attackers to discover credentials by sniffing the network during the authentication process when SSL is not enabled. Recommendations...

CVE-2012-5940: Improper Authentication

The WebAdmin application 6.0.5, 6.0.8, and 7.0 before P2 in IBM Netezza, when SSL is not enabled, allows remote attackers to discover credentials by sniffing the network during the authentication process...

Alt-N MDaemon WorldClient And WebAdmin - Cross-Site Request Forgery

Alt-N MDaemon WorldClient And WebAdmin - Cross-Site Request Forgery source: https://www.securityfocus.com/bid/58076/info MDaemon WorldClient and WebAdmin are prone to a cross-site request-forgery vulnerability. Exploiting this issue may allow a remote attacker to perform certain unauthorized...

Alt-N MDaemon WorldClient And WebAdmin - Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/58076/info MDaemon WorldClient and WebAdmin are prone to a cross-site request-forgery vulnerability. Exploiting this issue may allow a remote attacker to perform certain unauthorized actions and gain access to the affected application. Other attacks are...

Axigen Arbitrary File Read and Delete

This module exploits a directory traversal vulnerability in the WebAdmin interface of Axigen, which allows an authenticated user to read and delete arbitrary files with SYSTEM privileges. The vulnerability is known to work on Windows platforms. This module has been tested successfully on Axigen...

Netsweeper WebAdmin Portal - Multiple Vulnerabilities

Netsweeper WebAdmin Portal - Multiple Vulnerabilities Exploit Title: Netsweeper WebAdmin Portal CSRF, Reflective XSS, and SQL Injection "The later"\ Date: Discovered and reported CSRF and XSS 4/2012 and "The later" 7/2012\ Author: Jacob Holcomb/Gimppy042\ Software Link: Netsweeper Inc. - Netsweep...

Netsweeper WebAdmin Portal - Multiple Vulnerabilities

Exploit Title: Netsweeper WebAdmin Portal CSRF, Reflective XSS, and SQL Injection "The later"\ Date: Discovered and reported CSRF and XSS 4/2012 and "The later" 7/2012\ Author: Jacob Holcomb/Gimppy042\ Software Link: Netsweeper Inc. - Netsweeper Internet Filter www.netsweeper.com\ CVE :...

Netsweeper WebAdmin Portal CSRF / XSS / SQL Injection

Exploit Title: Netsweeper WebAdmin Portal CSRF, Reflective XSS, and SQL Injection "The later"\ Date: Discovered and reported CSRF and XSS 4/2012 and "The later" 7/2012\ Author: Jacob Holcomb/Gimppy042\ Software Link: Netsweeper Inc. - Netsweeper Internet Filter www.netsweeper.com\ CVE :...