Simone Cecchini

Researcher fromVerizon Enterprise Solutions GCIS Threat and Vulnerability Management
#15006of 60,452
20.8Total CVSS
Vulnerabilities · 3
Medium
1
High
2
PT-2014-4985
2014-07-10
4.3
CVE-2014-2963
Liferay
Liferay Portal
The issue concerns multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via specific parameters in the group/control panel/manage section. The vulnerable parameters are `firstName`, `lastName`, and `middleName`.
PT-2013-4489
2013-07-15
7.5
CVE-2013-3577
Wave
Wave Embassy Remote Administration Server
A SQL injection issue in the Help Desk application of Wave EMBASSY Remote Administration Server (ERAS) allows remote attackers to execute arbitrary SQL commands via the `ct100$4MainController$TextBoxSearchValue` parameter, also known as the search field.
PT-2013-4490
2013-07-15
9.0
CVE-2013-3578
Wave
Wave Embassy Remote Administration Server
The issue allows remote authenticated users to execute arbitrary SQL commands via the `ct100$4MainController$TextBoxSearchValue` parameter, which is the search field in the Help Desk application. This can lead to the execution of operating-system commands.