Mediacast

mediacast

Vendor: Inventivetec • 7 CVEs

CVEs (7)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2011-2081 1Inventivetec 1Mediacast Apr 29, 2026 May 10, 2011 N/A· v4 N/A· v3 5.0 MEDIUM· v2 MediaCAST 8 and earlier does not properly handle requests for inventivex/isptools/release/metadata/globalIncludeFolders.txt, which allows remote attackers to obtain sensitive information via unspecified vectors related t...Show more MediaCAST 8 and earlier does not properly handle requests for inventivex/isptools/release/metadata/globalIncludeFolders.txt, which allows remote attackers to obtain sensitive information via unspecified vectors related to the Public/ directory tree.Show less
CVE-2011-2080 1Inventivetec 1Mediacast Apr 29, 2026 May 10, 2011 N/A· v4 N/A· v3 7.5 HIGH· v2 Multiple SQL injection vulnerabilities in MediaCAST 8 and earlier allow remote attackers to execute arbitrary SQL commands via (1) a CP_ENLARGESTYLE cookie to the default URI under inventivex/managetraining/ or (2) unspe...Show more Multiple SQL injection vulnerabilities in MediaCAST 8 and earlier allow remote attackers to execute arbitrary SQL commands via (1) a CP_ENLARGESTYLE cookie to the default URI under inventivex/managetraining/ or (2) unspecified input to authenticate_ad_setup_finished.cfm.Show less
CVE-2011-2079 1Inventivetec 1Mediacast Apr 29, 2026 May 10, 2011 N/A· v4 N/A· v3 7.5 HIGH· v2 MediaCAST 8 and earlier allows remote attackers to have an unspecified impact via a (1) CP_RIGHTSOURCE or (2) bdclient_Inventive cookie to the default URI under inventivex/managetraining/, related to an "XML injection" i...Show more MediaCAST 8 and earlier allows remote attackers to have an unspecified impact via a (1) CP_RIGHTSOURCE or (2) bdclient_Inventive cookie to the default URI under inventivex/managetraining/, related to an "XML injection" issue.Show less
CVE-2011-2078 1Inventivetec 1Mediacast Apr 29, 2026 May 10, 2011 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Multiple cross-site scripting (XSS) vulnerabilities in the New Atlanta BlueDragon administrative interface in MediaCAST 8 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2011-2077 1Inventivetec 1Mediacast Apr 29, 2026 May 10, 2011 N/A· v4 N/A· v3 7.5 HIGH· v2 The default configuration of the New Atlanta BlueDragon administrative interface in MediaCAST 8 and earlier enables external TCP connections to port 10000, instead of connections only from 127.0.0.1, which makes it easie...Show more The default configuration of the New Atlanta BlueDragon administrative interface in MediaCAST 8 and earlier enables external TCP connections to port 10000, instead of connections only from 127.0.0.1, which makes it easier for remote attackers to have an unspecified impact via a TCP session.Show less
CVE-2011-2076 1Inventivetec 1Mediacast Apr 29, 2026 May 10, 2011 N/A· v4 N/A· v3 5.0 MEDIUM· v2 MediaCAST 8 and earlier stores passwords in cleartext, which makes it easier for context-dependent attackers to obtain sensitive information by reading an unspecified password data store, a different vulnerability than C...Show more MediaCAST 8 and earlier stores passwords in cleartext, which makes it easier for context-dependent attackers to obtain sensitive information by reading an unspecified password data store, a different vulnerability than CVE-2010-0216.Show less
CVE-2010-0216 1Inventivetec 1Mediacast Apr 29, 2026 May 10, 2011 N/A· v4 N/A· v3 5.0 MEDIUM· v2 authenticate_ad_setup_finished.cfm in MediaCAST 8 and earlier allows remote attackers to discover usernames and cleartext passwords by reading the error messages returned for requests that use the UserID parameter.