CVE-2008-2075

CVE-2008-2075 is a cross-site scripting (XSS) vulnerability in AstroCam’s pic.php, affecting versions 2.5.0 through 2.7.3. The issue allows an attacker to inject arbitrary web script or HTML via the picfile parameter. The CVSS data (AV:N/AC:M/Au:N/C:N/I:P/A:N) indicates network access, low attack...

CVE-2007-2075

ScramDisk 4 Linux before 1.0-1 lacks permission checks on mount points, enabling local users to gain privileges by using a system directory as a mount point for a container. This is described in CVE-2007-2075 with a local-privilege-escalation impact (attack vector LOCAL, without authentication). ...

CVE-2005-2075

PHP-Fusion versions 5.0–6.0 store database backups in predictable paths under the web root (administration/db_backups in 6.0 or fusion_admin/db_backups in 5.0), enabling remote attackers to disclose sensitive information via direct requests. The vulnerability is categorized as an information disc...

CVE-2005-2075

PHP-Fusion 5.0 and 6.0 stores the database file with a predictable filename under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to the filename in the administration/dbbackups directory in PHP-Fusion 6.0 ...

CVE-2004-2075

CVE-2004-2075 affects Sophos Anti-Virus 3.78. The vulnerability allows remote attackers to cause a denial of service (infinite loop) by sending a MIME header that is not properly terminated. The provided documents do not include exploit code, active exploit status, or a remediation/patch. No addi...