128 matches found
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Ideal Science Ideal BB 1.5.4a and earlier allow remote attackers to inject arbitrary web script or HTML via unknown vectors. NOTE: due to lack of details from the researcher, it is not clear whether this overlaps CVE-2004-2207...
CVE-2006-2321
Multiple cross-site scripting XSS vulnerabilities in Ideal Science Ideal BB 1.5.4a and earlier allow remote attackers to inject arbitrary web script or HTML via unknown vectors. NOTE: due to lack of details from the researcher, it is not clear whether this overlaps CVE-2004-2207...
Alt-N WebAdmin USER Buffer Overflow
Alt-N WebAdmin is prone to a buffer overflow condition. This is due to insufficient bounds checking on the USER parameter. Successful exploitation could result in code execution with SYSTEM level privileges. This module requires Metasploit: https://metasploit.com/download Current source:...
CVE-2002-2207
CVE-2002-2207 describes a buffer overflow in ssldump (version 0.9b2 and earlier) when running in decryption mode, allowing remote attackers to execute arbitrary code via a long RSA PreMasterSecret. The vulnerability is triggered over the network and is rated high severity (CVSS 2.0: AV:N/AC:L/Au:...
CVE-2005-2207
CVE-2005-2207 describes a Cross-site scripting (XSS) vulnerability in CartWIZ, specifically in store/login.asp, where an attacker can inject arbitrary web script or HTML through the message parameter. The issue affects the CartWIZ login flow as described, with the impact being that unauthenticate...
CVE-2004-2207
CVE-2004-2207 affects IdealBB, a web-based bulletin board, with a cross-site scripting (XSS) vulnerability reported in versions 1.4.9 through 1.5.3. The vulnerability allows remote attackers to inject arbitrary web script or HTML via unknown vectors. The connected OpenVAS and CVE records corrobor...
