78 matches found
CVE-2012-2046
CVE-2012-2046 affects Adobe Shockwave Player before 11.6.6.636. The vulnerability enables arbitrary code execution or a denial of service (memory corruption) via unspecified vectors. The available connected documents corroborate that this is a memory‑corruption issue in Shockwave Player, not deta...
CVE-2012-2046
Adobe Shockwave Player before 11.6.6.636 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2012-2043, CVE-2012-2044, CVE-2012-2045, and CVE-2012-2047...
CVE-2010-2046
ActiveHelper LiveHelp for Joomla! (com_activehelper_livehelp) version 2.0.3 is affected by multiple XSS vulnerabilities. The issue allows remote attackers to inject arbitrary JavaScript/HTML via (1) the DOMAINID parameter to server/cookies.php or (2) the SERVER parameter to server/index.php. Root...
Debian DSA-2046-1 : phpgroupware - several vulnerabilities
Several remote vulnerabilities have been discovered in phpgroupware, a Web-based groupware system written in PHP. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2010-0403 A local file inclusion vulnerability allows remote attackers to execute arbitrary...
Unfixed XSS vulnerability at www.xl.pt
Security researcher Juza, has submitted on 05/10/2010 a cross-site-scripting XSS vulnerability affecting www.xl.pt, which at the time of submission ranked 2046 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/04/2012. It is currently unfixed...
Cisco Security Advisory: Vulnerabilities in Cisco Video Surveillance Products
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Vulnerabilities in Cisco Video Surveillance Products Advisory ID: cisco-sa-20090624-video Revision 1.0 For Public Release 2009 June 24 1600 UTC GMT +--------------------------------------------------------------------- Summary...
Sql injection
SQL injection vulnerability in details.php in Application Dynamics Cartweaver 3.0 allows remote attackers to execute arbitrary SQL commands via the prodId parameter, possibly a related issue to CVE-2006-2046.3...
CVE-2008-2918
SQL injection vulnerability in details.php in Application Dynamics Cartweaver 3.0 allows remote attackers to execute arbitrary SQL commands via the prodId parameter, possibly a related issue to CVE-2006-2046.3...
CVE-2008-2046
creationtimestamp| type| source ---|---|--- 2008-06-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5880...
CVE-2008-2046
CVE-2008-2046 describes a cross-site scripting (XSS) vulnerability in the Softpedia SiteXS CMS 0.1.1 Pre-Alpha. The issue resides in index.php and allows remote attackers to inject arbitrary web script or HTML via the user parameter. Documented impact is partial integrity exposure with no confide...
CVE-2007-2046
CVE-2007-2046 affects Openads (phpAdsNew) 2.0.11 and earlier and Openads for PostgreSQL (phpPgAds) 2.0.11 and earlier. The vulnerability arises from CRLF injection in adclick.php, enabling remote attackers to inject arbitrary HTTP headers and perform HTTP response splitting via CRLF sequences in ...
Sending multipart/form-data requests from Flash (with arbitrary headers)
Hello lists, In my original "Forging HTTP request headers with Flash" paper http://www.securityfocus.com/archive/1/441014, I mentioned forcing multipart/form-data input format to ensure that Flash's LoadVars isn't used to forge the request. However, there's a work-around for the attacker - using...
CVE-2002-2046
CVE-2002-2046 affects X-News (x_news) 1.1 and earlier. The flaw allows remote attackers to gain administrative privileges by stealing and replaying the md5_password cookie. The NVD entry lists a CVSSv2 base score of 7.5 (HIGH) with network attack vector, low attack complexity, and no authenticati...
CVE-2005-2046
CVE-2005-2046 affects DUware DUamazon Pro 3.0 and 3.1 (ASP storefront). The vulnerability consists of multiple SQL injection flaws where attacker-controlled input in various parameters (iCat, iSub, iPro, and iType across cat.asp, sub.asp, detail.asp, review.asp, catEdit.asp, catDelete.asp, produc...
CVE-2004-2046
CVE-2004-2046 affects APC PowerChute Business Edition 6.0–7.0.1. The vulnerability is described as allowing remote denial of service via unknown attack vectors. The NVD entry provides a CVSS v2 base score of 5.0 (medium) with a network attack vector, low attack complexity, no authentication requi...
CVE-2002-2046
xnews.php in X-News xnews 1.1 and earlier allows remote attackers to gain administrative privileges by stealing and replaying the md5password cookie...
