Lucene search
+L

128 matches found

NVD
NVD
added 2008/05/12 5:20 p.m.19 views

CVE-2008-2140

Cross-site request forgery CSRF vulnerability in the rootpw plugin in rPath Appliance Platform Agent 2 and 3 allows remote attackers to reset the root password as the administrator via a crafted URL...

2.6CVSS7AI score0.00412EPSS
SaveExploits0References2
CVE
CVE
added 2008/05/12 5:00 p.m.50 views

CVE-2008-2140

CVE-2008-2140 corresponds to a CSRF vulnerability in the rootpw plugin of the rPath Appliance Platform Agent (versions 2 and 3). The underlying issue enables remote attackers to reset the root password for the administrator account through a crafted URL. The linked documents confirm the affected ...

2.6CVSS7AI score0.00412EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2008/05/12 5:00 p.m.24 views

CVE-2008-2140

Cross-site request forgery CSRF vulnerability in the rootpw plugin in rPath Appliance Platform Agent 2 and 3 allows remote attackers to reset the root password as the administrator via a crafted URL...

7AI score0.00412EPSS
SaveExploits0References2
CVE
CVE
added 2007/04/19 10:00 a.m.50 views

CVE-2007-2140

The vulnerability CVE-2007-2140 affects the PHP-based Flip (Flip-search-add-on) version 2.0, exposing a remote file inclusion flaw in the incpath parameter of everything.php that can lead to arbitrary PHP code execution. The provided documents identify the affected software as Franklin Huang Flip...

7.5CVSS7.5AI score0.01362EPSS
SaveExploits0References4Affected Software1
CVE
CVE
added 2006/05/02 10:00 a.m.49 views

CVE-2006-2140

CVE-2006-2140 describes multiple cross-site scripting (XSS) vulnerabilities in OrbitHYIP 2.0 and earlier. The issue allows remote attackers to inject arbitrary web script via the (1) referral parameter to signup.php or (2) id parameter to members.php. The CVSS-like data indicates partial impact o...

5.8CVSS6AI score0.01977EPSS
SaveExploits2References7Affected Software1
CVE
CVE
added 2005/06/30 4:00 a.m.72 views

CVE-2004-2140

CVE-2004-2140 describes a CRLF injection in YaBB 1 Gold before 1.3.2, where an attacker can modify text file contents via the subject parameter. Affected product: YaBB 1 Gold web forum software (pre-1.3.2). Root cause: input handling allows CRLF injection in the subject field, enabling unauthoriz...

5CVSS6.9AI score0.01041EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2004/12/31 5:00 a.m.27 views

CVE-2004-2140

CRLF injection vulnerability in YaBB 1 Gold before 1.3.2 allows remote attackers to modify text file contents via the subject variable...

5CVSS6.8AI score0.01041EPSS
SaveExploits0References2
NVD
NVD
added 2002/12/31 5:00 a.m.15 views

CVE-2002-2140

Buffer overflow in Cisco PIX Firewall 5.2.x to 5.2.8, 6.0.x to 6.0.3, 6.1.x to 6.1.3, and 6.2.x to 6.2.1 allows remote attackers to cause a denial of service via HTTP traffic authentication using 1 TACACS+ or 2 RADIUS...

5CVSS7.2AI score0.01995EPSS
SaveExploits0References4
Rows per page
Query Builder