92 matches found
CVE-2010-1609
CVE-2010-1609 concerns a cross-site scripting (XSS) vulnerability in SAP NetWeaver 2004 before SP21 and SAP NetWeaver 2004s before SP13. The connected sources confirm the affected product family and versions and describe the issue as an XSS vulnerability that allows remote attackers to inject arb...
CVE-2009-1609
CVE-2009-1609 refers to an unrestricted file upload vulnerability in Battle Blog 1.25, specifically in admin/uploadform.asp. An attacker can upload a file with an executable extension and then access it via a direct request to the uploaded file, enabling remote code execution. The entry is suppor...
CVE-2009-1609
creationtimestamp| type| source ---|---|--- 2009-05-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8647...
Debian DSA-1609-1 : lighttpd - various
Several local/remote vulnerabilities have been discovered in lighttpd, a fast webserver with minimal memory footprint. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-0983 lighttpd 1.4.18, and possibly other versions before 1.5.0, does not properly...
CVE-2008-1609
CVE-2008-1609 affects JAF CMS 4.0 RC2. Connected sources describe a remote file inclusion vulnerability whereby input in the website parameter (to forum/main.php and forum/forum.php) and the main_dir parameter (to forum/forum.php) can be used to include arbitrary files, enabling arbitrary PHP exe...
CVE-2008-1609
creationtimestamp| type| source ---|---|--- 2008-03-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5317...
CVE-2007-1609
CVE-2007-1609 is a cross-site scripting (XSS) vulnerability in Oracle Application Server 10g (DMS), specifically in servlet/Spy of Dynamic Monitoring Services. Exploitation involves injecting arbitrary script/HTML via the table parameter. The description notes a possible relation to CVE-2002-0563...
CVE-2006-1609
Technical details for CVE-2006-1609 are not publicly available in the provided documents; monitor for updates.
CVE-2005-1609
CVE-2005-1609 describes an unknown vulnerability in Sun StorEdge 6130 Arrays (SE6130) with serials 0451AWF00G–0513AWF00J that could allow local users and remote attackers to delete data. The NVD entry provides a CVSS v2 base score of 7.5 (HIGH) with network attack vector and no authentication req...
CVE-2002-1609
CVE-2002-1609 describes a buffer overflow in HP Tru64 UNIX binmail affecting versions 5.1a, 5.1, 5.0a, 4.0g, and 4.0f, allowing local users to gain privileges. The connected documents confirm the affected product and the local-privilege-escalation impact but do not provide any remediation, patch ...
