Tom Gregory

The issue allows remote attackers to read or write arbitrary files via a .. (dot dot) in the (1) get or (2) put commands. This is due to multiple directory traversal vulnerabilities in the TFTP Server.

The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved via the `menu` parameter in the menuXML.php file.

A SQL injection issue exists in the ad hoc query module, allowing remote attackers to execute arbitrary SQL commands.

A cross-site request forgery issue exists, allowing remote attackers to hijack administrator authentication for creating admin accounts via a saveAuth action in the saveAccountSubTab.imss module.

The issue concerns multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The injection can occur via two parameters: `wrsApprovedURL` to the "addRuleAttrWrsApproveUrl.imss" endpoint or the `src` parameter to the "initUpdSchPage.imss" endpoint.

The issue is related to multiple stack-based buffer overflows that allow remote attackers to execute arbitrary code. This is achieved via the `src` and `name` parameters in a p2g project file.

A buffer overflow issue allows remote attackers to execute arbitrary code via a crafted .plf file.

The issue is a stack-based buffer overflow that allows remote FTP servers to execute arbitrary code. This can occur when a long filename is received in response to a LIST command. The exploitation can be demonstrated using commands such as GETLIST or GETFILE in a ScriptFTP script.