89 matches found
CVE-2018-2261
CVE-2018-2261 entry is rejected/not used and does not represent an active vulnerability entry.
2261.com.ar XSS vulnerability
Open Bug Bounty ID: OBB-449802 Description| Value ---|--- Affected Website:| 2261.com.ar Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...
PeaZip Compressed Filename Command Injection (CVE-2009-2261)
A command injection vulnerability exists in PeaZip. A remote attacker may exploit this vulnerability by sending a specially crafted Zip file to a target user, and convince him to open this file with PeaZip. Successful exploitation would allow an attacker to execute commands in the security contex...
CVE-2008-2261
CVE-2008-2261 is rejected/not used per the initial description; not an active vulnerability entry.
CVE-2016-2261
CVE-2016-2261 entry is rejected and does not represent an active vulnerability.
Ubuntu: Security Advisory (USN-2261-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 19 : perl-Capture-Tiny-0.24-1.fc19 (2014-2261)
This release fixes CVE-2014-1875 -- insecure temporary file usage. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...
CVE-2012-2261
CVE-2012-2261 is rejected; this entry is not used and does not represent an active vulnerability.
CVE-2013-2261
creationtimestamp| type| source ---|---|--- 2012-11-07 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38636 2024-02-01 18:11:24+00:00| seen| https://t.me/ctinow/177714...
Oracle Secure Backup Administration Server validate_login Command Injection (CVE-2011-2261)
A command injection vulnerability has been reported in Oracle secure backup administration server. The vulnerability is due to insufficient user data filtering. A remote attacker may exploit this vulnerability by sending a specially crafted HTTP request to a target user. Successful exploitation...
Oracle Secure Backup Administration Server login.php uname Parameter Arbitrary Command Injection
The version of Oracle Secure Backup Administration Server running on the remote host fails to adequately sanitize user-supplied input to the 'uname' parameter of 'login.php'. The system performs some sanitization which limits exploitation of this issue, but code execution is still possible. A...
Design/Logic Flaw
Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.3.0.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2011-2261...
CVE-2011-2261
Oracle Secure Backup contains a remote command injection vulnerability (CVE-2011-2261) in the Administration Server login.php uname parameter. The flaw arises from insufficient input filtering in validate_login, allowing an unauthenticated attacker to inject commands and achieve remote code execu...
Debian DSA-2261-1 : redmine - several vulnerabilities
Joernchen of Phenoelit discovered several vulnerabilities in Redmine, a project management web application : - Logged in users may be able to access private data. - The Textile formatter allowed for cross site scripting, exposing sensitive data to an attacker. - The Bazaar repository adapter coul...
PeaZIP 2.6.1 - Zip Processing Command Injection (Metasploit)
$Id: peazipcommandinjection.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
CVE-2010-2261
Linksys WAP54Gv3 firmware 3.04.03 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 data2 and 2 data3 parameters to a Debugcommandpage.asp and b debug.cgi...
CVE-2010-2261
The CVE-2010-2261 entries confirm a remote command execution vulnerability in Linksys WAP54Gv3 firmware 3.04.03 and earlier. The issue is triggered by shell metacharacters supplied in the data2 and data3 parameters to Debug_command_page.asp and debug.cgi, enabling an attacker to execute arbitrary...