113 matches found
CVE-2008-2235
OpenSC before 0.11.5 uses weak permissions ADMIN file control information of 00 for the 5015 directory on smart cards and USB crypto tokens running Siemens CardOS M4, which allows physically proximate attackers to change the PIN...
CVE-2008-2235
OpenSC (pre-0.11.5) is affected by CVE-2008-2235 due to weak permissions on the 5015 directory for Siemens CardOS M4 smart cards and USB tokens, allowing a physically proximate attacker to change the PIN. The OpenSC/OpenSC-devel packages are the impacted components; the root cause is improper acc...
CVE-2008-2235
OpenSC before 0.11.5 uses weak permissions ADMIN file control information of 00 for the 5015 directory on smart cards and USB crypto tokens running Siemens CardOS M4, which allows physically proximate attackers to change the PIN...
CVE-2002-2235
CVE-2002-2235 affects vBulletin 2.2.9 and earlier, where member2.php mishandles the $perpage parameter by not enforcing an integer type. This can cause an error message to be reflected back to the user without quoting, facilitating cross-site scripting (XSS) and potentially other attacks. Connect...
CVE-2007-2235
Multiple cross-site scripting XSS vulnerabilities in PunBB 1.2.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 Referer HTTP header to misc.php or the 2 category name when deleting a category in admincategories.php...
CVE-2007-2235
PunBB 1.2.14 and older contains cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary web script or HTML. The issue arises from two vectors: (1) the Referer header to misc.php and (2) the category name when deleting a category in admin_categories.php. Affected...
CVE-2007-2235
Multiple cross-site scripting XSS vulnerabilities in PunBB 1.2.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 Referer HTTP header to misc.php or the 2 category name when deleting a category in admincategories.php...
CVE-2006-2235
CodeMunkyX aka free-php.net Simple Poll 1.0, when authentication is not required for the admin directory, allows remote attackers to gain administrative privileges by appending /admin/ to the top-level URI of the application...
CVE-2006-2235
CVE-2006-2235 affects CodeMunkyX (free-php.net) Simple Poll 1.0. The root cause is missing authentication for the admin directory, allowing remote attackers to gain administrative privileges by appending "/admin/" to the top-level URI. The vulnerability is network-exploitable with high complexity...
CVE-2004-2235
Technical details are not publicly available in the provided documents. Monitor for updates from official sources; no specifics on affected Moodle versions or root cause are given here.
CVE-2005-2235
The CVE-2005-2235 vulnerability affects IBM AIX 5.1, 5.2 and 5.3, where a buffer overflow in the diagTasksWebSM command could allow local users to execute arbitrary code via long command line arguments. The provided documents state the affected product and the underlying cause (buffer overflow in...
CVE-2002-2235
member2.php in vBulletin 2.2.9 and earlier does not properly restrict the $perpage variable to be an integer, which causes an error message to be reflected back to the user without quoting, which facilitates cross-site scripting XSS and possibly other attacks...
