144 matches found
CVE-2005-1708
The CVE affects Blue Coat Reporter before 7.1.2, where templates.admin.users.user_form_processing allows an authenticated user to elevate to administrator by sending an HTTP POST that sets volatile.user.administrator to true. Root cause is improper handling of admin-flag assignment via user form ...
CVE-2004-1708
CVE-2004-1708 affects Webbsyte Chat 0.9.0. The connected documents consistently describe a denial of service: remote attackers can crash the service by establishing a large number of connections. No explicit exploit details, mitigations, or patch information are provided in the sources. The vulne...
BasiliX Message Content XSS
The remote host appears to be running a BasiliX version 1.1.0 or lower. Such versions are vulnerable to cross-scripting attacks since they do not filter HTML tags when showing a message. As a result, an attacker can include arbitrary HTML and script code in a message and have that code executed b...
