108 matches found
CVE-2009-1965
CVE-2009-1965 affects Oracle Database Net Foundation Layer in 9.2.0.8 and 10.1.0.5. The vulnerability can be exploited remotely over the network via adjacent access, leading to partial confidentiality, integrity, and availability impacts. The Oracle October 2009 Critical Patch Update provides fix...
IBM Lotus Expeditor cai URI Handler Command Execution (CVE-2008-1965)
IBM Lotus Expeditor is a software framework for the development, integration and deployment of client applications. The framework include components that run on desktop computers, handheld devices, and management servers. There exist a buffer overflow vulnerability in IBM Lotus Symphony and Lotus...
CVE-2008-1965
IBM Lotus Expeditor's cai: URI handler in rcplauncher (used by Lotus Expeditor Client for Desktop 6.1.1/6.1.2 and Lotus Symphony) is vulnerable: a crafted cai: URI can inject -launcher to rcplauncher.exe, enabling remote code execution with the user's privileges. The attack relies on loading a sp...
CVE-2008-1965
creationtimestamp| type| source ---|---|--- 2008-04-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31706...
CVE-2007-1965
CVE-2007-1965 describes multiple cross-site scripting (XSS) vulnerabilities in eXV2 CMS versions up to 2.0.4.3 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via the set_lang parameter to (1) archive.php, (2) article.php, (3) index.php, or (4) topics.php. Ex...
CVE-2006-1965
CVE-2006-1965 affects aasi media Net Clubs Pro versions 4.0 and earlier. The vulnerability is multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML via parameters in various CGI scripts: (a) sendim.cgi (parameters onuser, pass, chatsys, room,...
CVE-2002-1965
CVE-2002-1965 affects Imatix Xitami 2.5b4 and 2.5b5 due to a Cross-site scripting (XSS) flaw in Errors.gsl. The vulnerability allows remote attackers to inject arbitrary script/HTML via (1) Javascript events in an IMG SRC tag (onerror demonstrated) or (2) the User-Agent header in a GET request. A...
