Logisphere

Logisphere

4 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
2.6

CVE-2006-3044

Exploit
  • EPSS 0.52%
  • Veröffentlicht 16.06.2006 10:02:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

Cross-site scripting (XSS) vulnerability in LogiSphere 1.6.0 allows remote attackers to inject arbitrary web script or HTML via the URL, which is reflected in an error page.

5

CVE-2005-4202

Exploit
  • EPSS 4.04%
  • Veröffentlicht 13.12.2005 11:03:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

Multiple directory traversal vulnerabilities in LogiSphere 0.9.9j allow remote attackers to access arbitrary files via (1) .. (dot dot), (2) "..." (triple dot), and (3) "..//" sequences in the URL, (4) "../" sequences in the source parameter to views...

7.8

CVE-2005-4203

Exploit
  • EPSS 1.1%
  • Veröffentlicht 13.12.2005 11:03:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

LogiSphere 0.9.9j does not restrict the number of messages that can be sent, which allows remote attackers to cause a denial of service by sending a large number of messages via the msg command. NOTE: due to lack of appropriate details by the origin...

4.3

CVE-2005-4204

  • EPSS 0.34%
  • Veröffentlicht 13.12.2005 11:03:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

Cross-site scripting (XSS) vulnerability in LogiSphere 0.9.9j allows remote attackers to inject arbitrary Javascript via the msg command. NOTE: due to lack of appropriate details by the original researcher, it is unclear whether this issue is distinc...