CVE-2010-2178

Adobe Flash Player before 9.0.277.0 and before 10.1.53.64, and Adobe AIR before 2.0.2.12610, are affected by CVE-2010-2178, which is described as enabling memory corruption that could lead to denial of service or possibly arbitrary code execution via unspecified vectors. The description reference...

CVE-2010-2178

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service memory corruption or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2160, CVE-2010-2165, CVE-2010-2166,...

openSUSE Security Update : flash-player (openSUSE-SU-2010:0321-1)

This Flash Player update fixes multiple critical security vulnerabilities which allow an attacker to remotely execute arbitrary code or to cause a denial of service. The following CVE numbers have been assigned : CVE-2008-4546, CVE-2009-3793, CVE-2010-1297, CVE-2010-2160, CVE-2010-2161,...

openSUSE Security Update : flash-player (openSUSE-SU-2010:0321-1)

This Flash Player update fixes multiple critical security vulnerabilities which allow an attacker to remotely execute arbitrary code or to cause a denial of service. The following CVE numbers have been assigned : CVE-2008-4546, CVE-2009-3793, CVE-2010-1297, CVE-2010-2160, CVE-2010-2161,...

Adobe AIR < 2.0.2.12610 Multiple Vulnerabilities (APSB10-14)

The remote Windows host contains a version of Adobe AIR that is earlier than 2.0.2.12610. Such versions are affected by multiple vulnerabilities, such as memory corruption, buffer overflows, and memory exhaustion, that could be exploited to cause an application crash or even allow execution of...

phpDatingClub 'search.php' Cross-Site Scripting and SQL Injection Vulnerabilities

phpDatingClub is prone to a cross-site scripting vulnerability and an SQL-injection vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the applicatio...

CVE-2009-2178

CVE-2009-2178 is a documented cross-site scripting (XSS) vulnerability in phpDatingClub 3.7. The affected component is the application’s PHP file website.php , with exploitation possible via the page parameter to inject arbitrary web script or HTML. The vulnerability is reported in the NVD entry ...

CVE-2009-2178

creationtimestamp| type| source ---|---|--- 2009-06-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8990...

Cross site scripting

Cross-site scripting XSS vulnerability in admin.php in LifeType 1.2.8 allows remote attackers to inject arbitrary web script or HTML via the newBlogUserName parameter in an addBlogUser action, a different vector than CVE-2008-2178...

CVE-2008-2178

Technical details for CVE-2008-2178 are not publicly available in the provided documents; monitor for updates.

CVE-2006-2178

Multiple cross-site scripting XSS vulnerabilities in CyberBuild allow remote attackers to inject arbitrary web script or HTML via the 1 SessionID parameter to login.asp, 2 ProductIndex parameter to browse0.htm, 3 rowcolor parameter to result.asp, or 4 heading parameter to result.asp. NOTE: vector...

CVE-2006-2178

CVE-2006-2178 affects CyberBuild with multiple cross-site scripting (XSS) vulnerabilities. The affected components are the login.asp page (SessionID parameter), browse0.htm (ProductIndex parameter), and result.asp (rowcolor and heading parameters). The description notes that vectors 1 and 2 may b...

CVE-2002-2178

CVE-2002-2178 is a cross-site scripting (XSS) vulnerability in the article.php module of phpWebSite 0.8.3. The issue allows remote attackers to execute arbitrary JavaScript by supplying a crafted sid parameter, demonstrated via an IMG tag. The available connected documents confirm the affected pr...

CVE-2005-2178

probe.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the olddat parameter. NOTE: it is unclear which product or vendor this program is associated with, if any...

CVE-2004-2178

SQL injection vulnerability in DevoyBB Web Forum 1.0.0 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2005-2178

CVE-2005-2178 describes a remote code execution vulnerability in probe.cgi via shell metacharacters supplied in the olddat parameter. The affected product/vendor is not identified in the sources. Exploitation details, affected versions, and remediation are not publicly detailed in the provided do...

CVE-2002-2178

Cross-site scripting XSS vulnerability in article.php module for phpWebSite 0.8.3 allows remote attackers to execute arbitrary Javascript script via the sid parameter, as demonstrated using an IMG tag...