149 matches found
CVE-2007-2141
CVE-2007-2141 affects ShoutPro 1.5.2 and is a Direct static code injection vulnerability in shoutbox.php. An attacker can inject arbitrary PHP code into shouts.php via the shout parameter, enabling remote code execution. The underlying root cause is unsanitized input handling in shoutbox.php, lea...
CVE-2006-2141
Cross-site scripting XSS vulnerability in popupimage in Collaborative Portal Server CPS 3.4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the pos argument...
CVE-2006-2141
CVE-2006-2141 describes a cross-site scripting (XSS) vulnerability in the popup_image function of Collaborative Portal Server (CPS) up to version 3.4.0 and earlier. The issue allows an attacker to inject arbitrary web script or HTML by supplying a malicious value in the pos parameter. The connect...
CVE-2002-2141
BeA WebLogic Server and Express 7.0/7.0.0.1 running Servlets and EJB on multiple servers are vulnerable to a flaw that, when an application is undeployed on one server, causes removal of security constraints and roles on all servers for affected Servlets or EJBs. This could enable unauthorized ac...
CVE-2005-2141
CVE-2005-2141 affects TCP Chat 1.0. The vulnerability allows remote attackers to cause a denial of service (crash) by sending a long string to the chat service, potentially triggering a buffer overflow. The provided documents do not specify a patch or version-specific remediation.
CVE-2004-2141
CVE-2004-2141 is a duplicate of CVE-2004-1827 and is not a separate active entry. Connected details for CVE-2004-1827 show a Cross-site scripting (XSS) vulnerability in YaBB 1 Gold(SP1.3) and YaBB SE 1.5.1 Final, allowing remote attackers to inject arbitrary web script via the background:url prop...
CVE-2002-2141
BEA WebLogic Server and Express 7.0 and 7.0.0.1, when running Servlets and Enterprise JavaBeans EJB on more than one server, will remove the security constraints and roles on all servers for any Servlets or EJB that are used by an application that is undeployed on one server, which could allow...
