CVE-2008-1967

CVE-2008-1967 describes a Cross-site Scripting (XSS) vulnerability in CFLogon/CFLogon.asp for Cezanne 6.5.1 and 7, exploitable via the SleUserName parameter to inject arbitrary web script/HTML. Affected component: CFLogon.asp (Cezanne); root cause: insufficient input validation for SleUserName le...

CVE-2008-1967

creationtimestamp| type| source ---|---|--- 2008-04-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31650...

CVE-2007-1967

The CVE-2007-1967 entry describes a PHP remote file inclusion in stat12’s index.php, exploitable via a URL in the langpath parameter to execute arbitrary PHP code. Affected software is stated as stat12 (specifically index.php), with the root cause being a remote file inclusion flaw. Impact is par...

CVE-2006-1967

Cross-site scripting XSS vulnerability in calendar/Visitor.cgi in KCScripts Calendar, distributed individually and as part of Portal Pack 6.0 and earlier, allows remote attackers to inject arbitrary web script or HTML via the sortorder parameter...

CVE-2006-1967

CVE-2006-1967 describes a Cross-site scripting (XSS) vulnerability in the calendar/Visitor.cgi component of KCScripts Calendar (distributed standalone and as part of Portal Pack 6.0 and earlier). The vulnerability allows remote attackers to inject arbitrary web script or HTML via the sort_order p...

CVE-2002-1967

XiRCON 1.0 Beta 4 is affected by a buffer overflow that can be triggered remotely via overly long (ctcp, primsg, msg, notice) commands, causing denial of service (disconnect). The provided documents describe the impact but do not include exploit details or a patch. Affected component: XiRCON 1.0 ...

CVE-2005-1967

Affected: ProductCart Ecommerce before 2.7. Vulnerable inputs: idcategory (viewPrd.asp), lid (editCategories.asp), icd (modCustomCardPaymentOpt.asp), idccr (OptionFieldsEdit.asp). Root cause: unsanitized user input enabling SQL injection. Impact: remote attacker could execute arbitrary SQL, with ...

CVE-2003-0305

Cisco IOS SAA (formerly RTR) vulnerabilities affect IOS versions 12.0–12.2 where the Service Assurance Agent can crash when processing malformed Response Time Responder packets sent to UDP port 1967. The root cause is a malformed RTR packet causing a crash in the RTR/SAA path; exploitation requir...