Tom Gregory

A vulnerabilidade permite que invasores remotos leiam ou gravem arquivos arbitrários por meio de um .. (ponto-ponto) nos comandos (1) get ou (2) put. Isso se deve a várias vulnerabilidades de traversal de diretório no servidor TFTP.

The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved via the `menu` parameter in the menuXML.php file.

A SQL injection issue exists in the ad hoc query module, allowing remote attackers to execute arbitrary SQL commands.

A cross-site request forgery issue exists, allowing remote attackers to hijack administrator authentication for creating admin accounts via a saveAuth action in the saveAccountSubTab.imss module.

The issue concerns multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The injection can occur via two parameters: `wrsApprovedURL` to the "addRuleAttrWrsApproveUrl.imss" endpoint or the `src` parameter to the "initUpdSchPage.imss" endpoint.

The issue is related to multiple stack-based buffer overflows that allow remote attackers to execute arbitrary code. This is achieved via the `src` and `name` parameters in a p2g project file.

A buffer overflow issue allows remote attackers to execute arbitrary code via a crafted .plf file.

The issue is a stack-based buffer overflow that allows remote FTP servers to execute arbitrary code. This can occur when a long filename is received in response to a LIST command. The exploitation can be demonstrated using commands such as GETLIST or GETFILE in a ScriptFTP script.