CVE-2011-4107

The simplexmlloadstring function in the XML import plug-in libraries/import/xml.php in phpMyAdmin 3.4.x before 3.4.7.1 and 3.3.x before 3.3.10.5 allows remote authenticated users to read arbitrary files via XML data containing external entity references, aka an XML external entity XXE injection...

CVE-2011-4107

The simplexmlloadstring function in the XML import plug-in libraries/import/xml.php in phpMyAdmin 3.4.x before 3.4.7.1 and 3.3.x before 3.3.10.5 allows remote authenticated users to read arbitrary files via XML data containing external entity references, aka an XML external entity XXE injection...

CVE-2011-4107

CVE-2011-4107 affects phpMyAdmin 3.3.x (before 3.3.10.5) and 3.4.x (before 3.4.7.1). The vulnerability resides in the XML import plug‑in (libraries/import/xml.php) where simplexml_load_string can process XML data containing external entity references, enabling a remote authenticated user to read ...

CVE-2011-4107

The simplexmlloadstring function in the XML import plug-in libraries/import/xml.php in phpMyAdmin 3.4.x before 3.4.7.1 and 3.3.x before 3.3.10.5 allows remote authenticated users to read arbitrary files via XML data containing external entity references, aka an XML external entity XXE injection...

CVE-2011-0212

servermgrd in Apple Mac OS X before 10.6.8 allows remote attackers to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service CPU and memory consumption, via an XML-RPC request containing an entity declaration in conjunction with an entity reference,...

CVE-2011-0212

servermgrd in Apple Mac OS X before 10.6.8 allows remote attackers to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service CPU and memory consumption, via an XML-RPC request containing an entity declaration in conjunction with an entity reference,...

CVE-2011-0212

CVE-2011-0212 affects Apple Mac OS X Server (servermgrd) prior to 10.6.8. An XML External Entity (XXE) flaw in servermgrd’s XML-RPC handling can allow remote attackers to read arbitrary files and potentially send HTTP requests to intranet servers, with possible CPU/memory DoS. Root cause: unsafe ...

SAP Netweaver ABAP - XML External Entity

Application: SAP NetWeaver ABAP Vendor URL: Bugs: XXE, Unauthorized access Risk: High Exploits: YES Reported: 13.05.2011 Vendor response: 17.05.2011 Patched: 13.11.2011 Date of Public Advisory: 13.03.2012 Reference: SAP Security Note 1594475 Author: Alexey Tyurin ERPScan Description SAP Netweaver...

CVE-2011-1502

Liferay Portal Community Edition CE 6.x before 6.0.6 GA, when Apache Tomcat is used, allows remote authenticated users to read arbitrary files via an entity declaration in conjunction with an entity reference, related to an XML External Entity aka XXE issue...

CVE-2011-1502

CVE-2011-1502 affects Liferay Portal Community Edition 6.x up to 6.0.6 GA when deployed with Apache Tomcat. The vulnerability stems from an XML External Entity (XXE) issue: remote authenticated users can read arbitrary files by abusing an entity declaration with an entity reference. The available...

SAP XI - authentication bypass

Application: SAP NetWeaver XI Versions Affected: SAP NetWeaver Vendor URL: http://www.sap.com Bugs: Security Bypass Exploits: YES Reported: 21.03.2011 Vendor response: 22.03.2011 Date of Public Advisory: 11.09.2012 Reference: SAP Security Note 1707494 Authors: Alexander Polyakov, Alexey Tyurin,...

Атака XXE (XML eXternal Entity)

«Новое – это хорошо забытое старое» мигом вспомнилась мне поговорка, когда при оценке защищенности очередного веб-приложения успешно прошла атака XXE. Немедленно захотелось написать об этом пару слов, ибо: - XML-транспорт занял одно из доминирующих мест по распространенности в распределенных...

Splunk Multiple vulnerabilities

This host is running Splunk and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodsplunkmultvuln.nasl 5401 2017-02-23 09:46:07Z teissa $ Splunk Multiple vulnerabilities Authors: Sooraj KS Copyright: Copyright c 2010 SecPod, http://www.secpod.com This program is free...

Splunk 4.0.0 - 4.1.4 Multiple Vulnerabilities

Splunk is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:splunk:splunk"; ifdescription...

CVE-2010-3322

The XML parser in Splunk 4.0.0 through 4.1.4 allows remote authenticated users to obtain sensitive information and gain privileges via an XML External Entity XXE attack to unknown vectors...

Xxe

The XML parser in Splunk 4.0.0 through 4.1.4 allows remote authenticated users to obtain sensitive information and gain privileges via an XML External Entity XXE attack to unknown vectors...

CVE-2010-3322

The XML parser in Splunk 4.0.0 through 4.1.4 allows remote authenticated users to obtain sensitive information and gain privileges via an XML External Entity XXE attack to unknown vectors...

CVE-2010-3322

Summary: CVE-2010-3322 affects Splunk 4.0.0–4.1.4 due to an XML External Entity (XXE) flaw in the XML parser. Remote authenticated users could obtain sensitive information and gain privileges via XXE. Details in connected documents confirm the affected software and the underlying cause, but no ex...

Ektron CMS400.net TransformXslt Web Service Directory Traversal

The installed version of Ektron CMS400.net ships with a web service that processes untrusted XML data and could allow an attacker to perform XML External Entity XXE attacks. Nessus was able to exploit this issue by sending a specially crafted request to the 'TransformXslt' web service, and retrie...

Multiple Adobe Products XML External Entity (XXE) Injection (APSB10-05)

The remote host appears to be running an Adobe product that is susceptible to XML External Entity XXE attacks. The installed version of the product fails to block the use of external XML entities while using the HTTPChannel to transport data in AMFX format. A remote, unauthenticated attacker coul...