115 matches found
IBM WebSphere Application Server Buffer Overflow (CVE-2005-1872)
The IBM WebSphere Application Server is a Java 2 Enterprise Edition J2EE and Web Services-based application server. The software is made available for various vendor operating systems. There exists a buffer overflow vulnerability in IBM's WebSphere Application Server. The vulnerability is caused ...
Debian: Security Advisory (DSA-1872-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2009-1872
Adobe ColdFusion Server 8.0.1 and earlier are affected by multiple XSS vulnerabilities. The issues allow remote attackers to inject arbitrary script/HTML via: (1) the startRow parameter in administrator/logviewer/searchlog.cfm, and (2) the query string to wizards/common/_logintowizard.cfm, (3) wi...
CVE-2009-1872
Multiple cross-site scripting XSS vulnerabilities in Adobe ColdFusion Server 8.0.1, 8, and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the startRow parameter to administrator/logviewer/searchlog.cfm, or the query string to 2 wizards/common/logintowizard.cfm, 3...
Adobe Coldfusion 8 XSS / XSRF
http://www.dsecrg.com/pages/vul/show.php?id=122 Digital Security Research Group DSecRG Advisory DSECRG-09-022 Application: Adobe Coldfusion 8 Versions Affected: Adobe Coldfusion 8 Vendor URL: http://adobe.com Bugs: Multiple Linked XSS,XSRF Exploits: YES Reported: 12.01.2009 Vendor response:...
[DSECRG-09-022] Adobe Coldfusion 8 Multiple Linked XSS Vulnerabilies
http://www.dsecrg.com/pages/vul/show.php?id=122 Digital Security Research Group DSecRG Advisory DSECRG-09-022 Application: Adobe Coldfusion 8 Versions Affected: Adobe Coldfusion 8 Vendor URL: http://adobe.com Bugs: Multiple Linked XSS,XSRF Exploits: YES Reported: 12.01.2009 Vendor response:...
CVE-2009-1872
creationtimestamp| type| source ---|---|--- 2009-08-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33169 2009-08-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33167 2009-08-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33170 2009-08-17...
CVE-2008-1872
The CVE covers a SQL injection vulnerability in Comdev News Publisher 4.1.2, specifically in the home.news.php script where the arcmonth parameter can be exploited to execute arbitrary SQL commands remotely. This is documented with a CVSS v2 base score of 7.5 (HIGH) and a network attack vector wi...
CVE-2007-1872
CVE-2007-1872 concerns a cross-site scripting (XSS) vulnerability in toendaCMS 1.5.3. The issue allows remote attackers to inject arbitrary web script or HTML via the searchword parameter in a search id. The NVD entry lists a MEDIUM base severity (CVSS2: AV:N/AC:M/Au:N/C:N/I:P/A:N, 4.3 overall) w...
CVE-2007-1872: Cross site scripting in toendaCMS 1.5.3
Cross site scripting in toendaCMS 1.5.3 security advisory References: http://www.toendacms.com/ https://vulners.com/cve/CVE-2007-1872 Description: Cross site scripting describes attacks that allow to insert malicious html or javascript code via get or post forms. This can be used to steal session...
CVE-2007-1872.txt
Cross site scripting in toendaCMS 1.5.3 security advisory References: http://www.toendacms.com/ http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1872 Description: Cross site scripting describes attacks that allow to insert malicious html or javascript code via get or post forms. This can be...
CVE-2006-1872
Technical details about CVE-2006-1872 are not publicly available in the provided documents. Monitor for updates from sources in connected documents; no concrete affected products, root cause, impact, or remediation can be stated from the supplied data.
CVE-2005-1872
The CVE-2005-1872 entry covers a buffer overflow in the administrative console of IBM WebSphere Application Server 5.x when global security is enabled. The related advisory materials describe improper validation of user-supplied input in the authentication process, which can allow remote attacker...
CVE-2004-1872
CVE-2004-1872 affects WebCT Campus Edition 4.1.1.5 and is a Cross-site Scripting (XSS) vulnerability that allows remote injection of arbitrary script/HTML via the @import URL function in a CSS style tag. The NVD CVSS v2 base score is 4.3 (MEDIUM) with network access, no authentication, and partia...
