CVE-2010-2366

CVE-2010-2366: Cross-site scripting vulnerability in futomi CGI Cafe Access Analyzer CGI Professional and Standard (4.0.2 and earlier). Root cause: tags embedded into web pages in a particular method, enabling remote attacker-exec script via unspecified vectors. Affected: Access Analyzer CGI Prof...

CVE-2009-0971

CVE-2009-0971 is an XSS flaw in futomi’s CGI Cafe Access Analyzer CGI Standard (Version 3.8.1 and earlier). Public records describe an arbitrary-script execution in the user’s browser via unknown vectors, with fixes in Version 4.x (4.0.0 and later, e.g., 4.0.2). Affected software: Access Analyzer...

CVE-2008-5809

The CVE-2008-5809 affects futomi CGI Cafe’s Access Analyzer CGI: Standard v4.0.1 and earlier and Professional v4.11.3 and earlier, where a predictable session ID enables remote attackers to hijack sessions and view analysis results. Root cause: predictable session identifiers. Impact: partial dis...