CVE-2012-2278

CVE-2012-2278: XSS in EMC RSA Authentication Manager 7.1 before SP4 P14 and RSA SecurID Appliance 3.0 before SP4 P14, affecting the Self-Service Console and Security Console. Root cause: cross-site scripting via unspecified vectors, enabling remote script/HTML injection. Exploitation status not s...

CVE-2012-2278

Multiple cross-site scripting XSS vulnerabilities in the 1 Self-Service Console and 2 Security Console in EMC RSA Authentication Manager 7.1 before SP4 P14 and RSA SecurID Appliance 3.0 before SP4 P14 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-2278

Technical details about CVE-2011-2278 are not publicly available in the provided connected documents. Please monitor for updates from Oracle/NVD and related advisories.

Debian DSA-2278-1 : horde3 - several vulnerabilities

It was discovered that horde3, the horde web application framework, is prone to a cross-site scripting attack and a cross-site request forgery. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory...

CVE-2010-2278

The vulnerability CVE-2010-2278 affects IBM Lotus Connections 2.5.x prior to 2.5.0.2, where the bookmarklet pop-up in the Bookmarks component does not properly enforce the force SSL setting. This could allow remote attackers to sniff or MITM network traffic or spoof arbitrary servers. Impact is p...

CVE-2005-2278

creationtimestamp| type| source ---|---|--- 2010-04-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16485 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/imap/mailenablestatus.rb 2025-02-06 03:13:38+00:00| seen...

CVE-2008-2278

The CVE-2008-2278 entry concerns an SQL injection in Freelance Auction Script 1.0, exploitable via the pid parameter in a pdetails action of browseproject.php. The vulnerability enables remote attackers to execute arbitrary SQL commands and has a base CVSS v2 score of 7.5 (HIGH). Affected softwar...

CVE-2008-2278

creationtimestamp| type| source ---|---|--- 2008-05-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5613...

CVE-2002-2278

CVE-2002-2278 is a cross-site scripting (XSS) vulnerability in PortailPHP 0.99, specifically in mod_search/index.php. The issue arises from injecting arbitrary web script or HTML via six user-controllable variables: $App_Theme, $Rub_Search, $Rub_News, $Rub_File, $Rub_Liens, and $Rub_Faq. The prov...

CVE-2007-2278

CVE-2007-2278 affects DCP-Portal 6.1.1. The vulnerability is described as multiple PHP remote file inclusion weaknesses that allow remote attackers to execute arbitrary PHP code via a URL supplied in (1) the path parameter to library/adodb/adodb.inc.php, (2) the abs_path_editor parameter to libra...

CVE-2006-2278

SaphpLesson 3.0 contains an input handling flaw: it does not initialize array variables, enabling an attacker to disclose the full filesystem path via non-array parameters. The affected vectors are (1) hrow to show.php or index.php; (2) Lsnrow to showcat.php; and (3) rows to index.php. This is a ...

MailEnable IMAP STATUS buffer overflow

Added: 11/29/2005 CVE: CVE-2005-2278 BID: 14243 OSVDB: 17844 Background MailEnable is a mail server for Windows platforms. The standard edition supports the SMTP and POP3 protocols. MailEnable Professional and MailEnable Enterprise also support IMAP and HTTPMail. Problem A buffer overflow in the...

MailEnable IMAP STATUS buffer overflow

Added: 11/29/2005 CVE: CVE-2005-2278 BID: 14243 OSVDB: 17844 Background MailEnable is a mail server for Windows platforms. The standard edition supports the SMTP and POP3 protocols. MailEnable Professional and MailEnable Enterprise also support IMAP and HTTPMail. Problem A buffer overflow in the...

MailEnable IMAP STATUS buffer overflow

Added: 11/29/2005 CVE: CVE-2005-2278 BID: 14243 OSVDB: 17844 Background MailEnable is a mail server for Windows platforms. The standard edition supports the SMTP and POP3 protocols. MailEnable Professional and MailEnable Enterprise also support IMAP and HTTPMail. Problem A buffer overflow in the...

CVE-2004-2278

Vulnerability: vHost

CVE-2002-2278

Cross-site scripting XSS vulnerability in modsearch/index.php in PortailPHP 0.99 allows remote attackers to inject arbitrary web script or HTML via the 1 $AppTheme, 2 $RubSearch, 3 $RubNews, 4 $RubFile, 5 $RubLiens, or 6 $RubFaq variables...