CVE-2002-0486

Description

References

• securityfocus.com/archive/1/263485 · Vendor Advisory
• securityfocus.com/bid/4344 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/8614

Weitere Schwachstellen in xpede

• CVE-2002-0487MITTEL 4.6Intellisol Xpede 4.1 stores passwords in plaintext in a Javascript "session timeout" re-authentication capability, which could allow local u…
• CVE-2002-0584MITTEL 5.0WorkforceROI Xpede 4.1 allows remote attackers to read user timesheets by modifying the TSN ID parameter to the ts_app_process.asp script, w…
• CVE-2002-0583MITTEL 5.0WorkforceROI Xpede 4.1 uses a small random namespace (5 alphanumeric characters) for temporary expense claim reports in the /reports/temp di…
• CVE-2002-0582MITTEL 5.0WorkforceROI Xpede 4.1 stores temporary expense claim reports in a world-readable and indexable /reports/temp directory, which allows remote…
• CVE-2002-0581HOCH 7.5WorkforceROI Xpede 4.1 allows remote attackers to execute arbitrary SQL commands and read, modify, or steal credentials from the database vi…