111 matches found
CVE-2009-2067
Opera detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying an http page to include an https iframe that references a script file on an http site, related...
CVE-2009-2067
The CVE-2009-2067 issue affects Opera browser. The vulnerability arises when an https page loads an http iframe referencing http content, allowing a MITM to inject arbitrary script within an https site context. This is tied to the HTTP-Intended-but-HTTPS-Loadable (HPIHSL) scenario and could enabl...
CVE-2009-2067
Opera detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying an http page to include an https iframe that references a script file on an http site, related...
CVE-2008-2067
CVE-2008-2067 is a SQL injection in miniBB 2.2a (and older before 3.0.1) via the whatus parameter in the searchusers2 action of bb_admin.php. Affected versions include at least 2.2a; vulnerability extended to earlier releases per note. Public advisories reference fixes with miniBB 3.0.1; remediat...
Code injection
The data-link switching DLSw component in Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service device restart or memory consumption via crafted 1 UDP port 2067 or 2 IP protocol 91 packets...
SuSE 10 Security Update : mozilla-nss,mozilla-nss-devel (ZYPP Patch Number 2067)
A security problem in the SSL handling of the NSS libraries was found : If an RSA key with exponent 3 is used it may be possible to forge a PKCS verify the certificate if they are not checking for excess data in the RSA exponentiation result of the signature. This bug is tracked by the Mitre CVE ...
CVE-2006-2067
The CVE-2006-2067 entry documents a SQL injection vulnerability in MKPortal 1.1 when used with vBulletin 3.5.4 and earlier. The flaw affects vb_board_functions.php, where the userid parameter can be exploited by remote attackers to execute arbitrary SQL commands. No specific exploit details are p...
CVE-2005-2067
CVE-2005-2067 affects ASP-Nuke
CVE-2004-2067
CVE-2004-2067: SQL injection in controlpanel.php of Jaws Framework and Content Management System 0.4 allows remote attackers to bypass authentication by injecting via the (1) user, (2) password, or (3) crypted_password parameters. Impact indicated as partial confidentiality/integrity/availability...
CVE-2004-2067
SQL injection vulnerability in controlpanel.php in Jaws Framework and Content Management System 0.4 allows remote attackers to execute arbitrary SQL and bypass authentication via the 1 user, 2 password, or 3 cryptedpassword parameters...