35 matches found
CVE-2012-0285
Multiple cross-site scripting XSS vulnerabilities in Stoneware webNetwork before 6.0.8.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Stoneware webNetwork before 6.0.8.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2012-0285
CVE-2012-0285 involves Stoneware webNetwork with multiple XSS vulnerabilities in versions before 6.0.8.0. Exploitation vectors are not specified in the provided documents, but the CVE description states that remote attackers can inject arbitrary web script or HTML, affecting integrity (I:P) with ...
CVE-2012-0286
Stoneware webNetwork prior to 6.0.8.0 is affected by a Cross-Site Request Forgery (CSRF) vulnerability that can allow remote attackers to hijack user authentication and perform requests that modify user accounts. The issue is documented in CVE-2012-0286 and reflected across multiple feeds (NVD/Re...
CVE-2012-0912
SQL injection vulnerability in Stoneware webNetwork before 6.0.8.0 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2012-0912
CVE-2012-0912 : Concrete details show a SQL injection vulnerability in Stoneware webNetwork before version 6.0.8.0 . The issue allows remote attackers to execute arbitrary SQL commands via unspecified vectors. The NVD entry lists a high impact (CVSS v2 base score 7.5) with network access, no auth...
CVE-2012-0285
Multiple cross-site scripting XSS vulnerabilities in Stoneware webNetwork before 6.0.8.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2012-0286
Cross-site request forgery CSRF vulnerability in Stoneware webNetwork before 6.0.8.0 allows remote attackers to hijack the authentication of unspecified victims for requests that modify user accounts...
PT-2012-2462
Name of the Vulnerable Software and Affected Versions Stoneware webNetwork versions prior to 6.0.8.0 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The estimated number of...
CVE-2012-0912: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Stoneware webNetwork before 6.0.8.0 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
PT-2012-2463
Name of the Vulnerable Software and Affected Versions Stoneware webNetwork versions prior to 6.0.8.0 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of victims for requests that modify user accounts. Recommendations For versions prior to 6.0.8.0...
CVE-2012-0286: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in Stoneware webNetwork before 6.0.8.0 allows remote attackers to hijack the authentication of unspecified victims for requests that modify user accounts...
PT-2012-2944
Name of the Vulnerable Software and Affected Versions Stoneware webNetwork versions prior to 6.0.8.0 Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 6.0.8.0, update to version 6.0.8.0 or later to resolve the issue...
CVE-2012-0285: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Stoneware webNetwork before 6.0.8.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
webNetwork Persistent XSS Vulnerability
Exploit for php platform in category web applications ======================================= webNetwork Persistent XSS Vulnerability ======================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ ...