147 matches found
WebScarab <= 20060621-0003 cross site scripting
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SA0012 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ +++++ WebScarab Cross Site Scripting +++++ +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ PUBLISHED ON Jul 18, 2006 PUBLISHED AT...
CVE-2006-1904
CVE-2006-1904 is a cross-site scripting (XSS) vulnerability reported in the AnimeGenesis Gallery project, affecting the file index.php. The issue allows remote attackers to inject arbitrary web script or HTML by manipulating the cat parameter. Public references include NVD entry with the XSS desc...
CVE-2002-1904
CVE-2002-1904 describes a buffer overflow in the Log function of GazTek ghttpd 1.4–1.4.3 (util.c) that can be triggered by a long HTTP GET request, enabling remote code execution. The vulnerability is risk-labeled as high (CVSS base score 7.5) with network access, no authentication, and the poten...
CVE-2005-1904
CVE-2005-1904 affects JiRo's Upload System (JUS) version 1, where login.asp is vulnerable to SQL injection via the password parameter, enabling remote attackers to execute arbitrary SQL commands. Root cause is unsafe handling/concatenation of the password input in the login logic, leading to comm...
CVE-2004-1904
Technical details about CVE-2004-1904 are not provided in the supplied documents; no publicly accessible specifics (affected product, root cause, or remediation) are present beyond the initial description. Monitor for updates.
