74 matches found
CVE-2010-2275
CVE-2010-2275 is an XSS vulnerability in the Dojo Toolkit SDK prior to version 1.4.2. The issue arises in the file dijit/tests/_testCommon.js where an attacker can inject arbitrary script or HTML through the theme parameter, demonstrated by an attack against dijit/tests/form/test_Button.html. Mul...
FreeBSD Ports: dojo
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2010-2275
creationtimestamp| type| source ---|---|--- 2010-03-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33764...
CVE-2009-2275
CVE-2009-2275 is a directory traversal vulnerability affecting cPanel, specifically in frontend/x3/stats/lastvisit.html. The issue allows remote attackers to read arbitrary files by injecting .. into the domain parameter. According to the provided sources, the exposure is tied to a path traversal...
CVE-2009-2275
creationtimestamp| type| source ---|---|--- 2009-06-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9039...
CVE-2008-2275
CVE-2008-2275 affects the TYPO3 sr_feuser_register extension. The vulnerability concerns multiple versions: 1.4.0, 1.6.0, 2.2.1–2.2.7, 2.3.0–2.3.6, 2.4.0, and 2.5.0–2.5.9. It is described as an unspecified vulnerability that allows remote attackers to execute arbitrary code and delete arbitrary f...
CVE-2002-2275
Fortres 101 4.1 is affected. A local bypass allows a user to press Windows+F for about 30 seconds, opening multiple windows and ultimately crashing explorer.exe, which then launches an unrestricted explorer.exe. The material does not provide remediation details.
Fedora Core 4 : kernel-2.6.16-1.2111_FC4 (2006-573)
This update rebases to the latest upstream -stable release 2.6.16.17, where a number of security problems have been fixed, notably : SCTP: Validate the parameter length in HB-ACK chunk CVE-2006-1857 SCTP: Respect the real chunk length when walking parameters CVE-2006-1858 fs/locks.c: Fix leaseini...
BELL-CVE-2006-2275 CVE-2006-2275 does not affect BellSoft software
Bulletin has no description...
CVE-2006-2275
CVE-2006-2275 affects the SCTP (lksctp) implementation in Linux kernels prior to the 2.6.17 release. The issue allows a remote attacker to cause a Denial of Service (deadlock) by sending a large number of small messages to a receiver application that cannot process them quickly enough, resulting ...
i-mall.cgi RCE Vulnerability
The script i-mall.cgi is installed. Some versions of this script are vulnerable to remote command execution flaw, due to insufficient user input sanitization. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...
CVE-2004-2275
The CVE-2004-2275 entry concerns i-mall.cgi in I-Mall Commerce, where remote command execution is possible via shell metacharacters in the p parameter. The vulnerability stems from insufficient input sanitization in i-mall.cgi, enabling an attacker to pass arbitrary shell commands to the remote s...
