| Max CVSS | 7.5 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2011-2080 | 7.5 |
Multiple SQL injection vulnerabilities in MediaCAST 8 and earlier allow remote attackers to execute arbitrary SQL commands via (1) a CP_ENLARGESTYLE cookie to the default URI under inventivex/managetraining/ or (2) unspecified input to authenticate_a
|
29-08-2017 - 01:29 | 10-05-2011 - 19:55 | |
| CVE-2010-0216 | 5.0 |
authenticate_ad_setup_finished.cfm in MediaCAST 8 and earlier allows remote attackers to discover usernames and cleartext passwords by reading the error messages returned for requests that use the UserID parameter.
|
17-08-2017 - 01:31 | 10-05-2011 - 19:55 | |
| CVE-2011-2077 | 7.5 |
The default configuration of the New Atlanta BlueDragon administrative interface in MediaCAST 8 and earlier enables external TCP connections to port 10000, instead of connections only from 127.0.0.1, which makes it easier for remote attackers to have
|
22-09-2011 - 03:31 | 10-05-2011 - 19:55 | |
| CVE-2011-2081 | 5.0 |
MediaCAST 8 and earlier does not properly handle requests for inventivex/isptools/release/metadata/globalIncludeFolders.txt, which allows remote attackers to obtain sensitive information via unspecified vectors related to the Public/ directory tree.
|
22-09-2011 - 03:31 | 10-05-2011 - 19:55 | |
| CVE-2011-2079 | 7.5 |
MediaCAST 8 and earlier allows remote attackers to have an unspecified impact via a (1) CP_RIGHTSOURCE or (2) bdclient_Inventive cookie to the default URI under inventivex/managetraining/, related to an "XML injection" issue.
|
22-09-2011 - 03:31 | 10-05-2011 - 19:55 | |
| CVE-2011-2078 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in the New Atlanta BlueDragon administrative interface in MediaCAST 8 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
|
22-09-2011 - 03:31 | 10-05-2011 - 19:55 | |
| CVE-2011-2076 | 5.0 |
MediaCAST 8 and earlier stores passwords in cleartext, which makes it easier for context-dependent attackers to obtain sensitive information by reading an unspecified password data store, a different vulnerability than CVE-2010-0216.
|
22-09-2011 - 03:31 | 10-05-2011 - 19:55 |