PT-2015-6663

Name of the Vulnerable Software and Affected Versions Xsuite versions 2.4.4.5 and earlier Description A directory traversal issue exists, allowing remote attackers to read arbitrary files. This is achieved by using a ....// quadruple dot double slash in the logFile parameter of the opm/read...

PT-2015-6662

Name of the Vulnerable Software and Affected Versions Xceedium Xsuite versions 2.4.4.1 and earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the fileName parameter in the "ajax cmd.php" file. Recommendations For versions 2.4.4....

Xceedium Xsuite - Multiple Vulnerabilities

Xceedium Xsuite - Multiple Vulnerabilities See also: http://www.modzero.ch/advisories/MZ-15-02-Xceedium-Xsuite.txt --------------------------------------------------------------------- modzero Security Advisory: Multiple Vulnerabilities in Xceedium Xsuite MZ-15-02...

Multiple (remote and local) Vulnerabilities in Xceedium Xsuite [MZ-15-02]

See also: http://www.modzero.ch/advisories/MZ-15-02-Xceedium-Xsuite.txt --------------------------------------------------------------------- modzero Security Advisory: Multiple Vulnerabilities in Xceedium Xsuite MZ-15-02 ---------------------------------------------------------------------...

Xceedium Xsuite - Multiple Vulnerabilities

See also: http://www.modzero.ch/advisories/MZ-15-02-Xceedium-Xsuite.txt --------------------------------------------------------------------- modzero Security Advisory: Multiple Vulnerabilities in Xceedium Xsuite MZ-15-02 ---------------------------------------------------------------------...

Xceedium Xsuite Command Injection / XSS / Traversal / Escalation

See also: http://www.modzero.ch/advisories/MZ-15-02-Xceedium-Xsuite.txt --------------------------------------------------------------------- modzero Security Advisory: Multiple Vulnerabilities in Xceedium Xsuite MZ-15-02 ---------------------------------------------------------------------...