Show filters
33 Total Results
Displaying 31-33 of 33
Sort by:
Attacker Value
Unknown
CVE-2013-7231
Disclosure Date: December 30, 2013 (last updated July 12, 2024)
Cross-site scripting (XSS) vulnerability in the Mobile Content Server in ESRI ArcGIS for Server 10.1 and 10.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2013-5222.
0
Attacker Value
Unknown
CVE-2013-5221
Disclosure Date: September 24, 2013 (last updated July 12, 2024)
The mobile-upload feature in Esri ArcGIS for Server 10.1 through 10.2 allows remote authenticated users to upload .exe files by leveraging (1) publisher or (2) administrator privileges.
0
Attacker Value
Unknown
CVE-2012-4949
Disclosure Date: November 14, 2012 (last updated July 12, 2024)
SQL injection vulnerability in ESRI ArcGIS 10.1 allows remote authenticated users to execute arbitrary SQL commands via the where parameter to a query URI for a REST service.
0
