CVE-2010-2043

CVE-2010-2043 describes a cross-site scripting (XSS) vulnerability in DataTrack System versions 3.5 and 3.5.8019.4, specifically affecting Home.aspx. The XSS can be triggered by manipulating the Work_Order_Summary parameter (the request summary), enabling remote attackers to inject arbitrary web ...

CVE-2010-2079

CVE-2010-2079 affects Magnoware DataTrack System (v3.5). The vulnerability arises from a flaw in URI handling that permits a trailing backslash to bypass extension restrictions and read protected files, exemplified by access to (1) web.config and (2) .ascx files. The documented impact is an infor...

CVE-2010-2078

DataTrack System 3.5 is affected by CVE-2010-2078, where remote attackers can cause a root-directory listing via two crafted URIs: /%u0085/ and /%u00A0/. OpenVAS entries also reference DataTrack System