49 matches found
CVE-2002-2290
CVE-2002-2290 affects Mambo Site Server 4.0.11, where a default username/password of admin enables remote attackers to gain privileges. The description across sources repeats that a default credential leads to privilege escalation, but no concrete exploit vectors or patched versions are provided ...
CVE-2002-2290
Mambo Site Server 4.0.11 installs with a default username and password of admin, which allows remote attackers to gain privileges...
CVE-2007-2290
CVE-2007-2290 affects B2 Weblog and News Publishing Tool 0.6.1. It describes multiple PHP remote file inclusion vulnerabilities that allow remote attackers to execute arbitrary PHP code by supplying a URL in the b2inc parameter to one of three scripts: b2archives.php, b2categories.php, or b2mail....
CVE-2006-2290
CVE-2006-2290 describes multiple cross-site scripting (XSS) vulnerabilities in kommentar.php of the 2005-Comments-Script. The issue allows remote attackers to inject arbitrary web script or HTML via the 1) id, 2) email, and 3) url parameters. According to NVD, the CVSS v2 base score is 6.8 (Mediu...
CVE-2006-2290
Multiple cross-site scripting XSS vulnerabilities in kommentar.php in 2005-Comments-Script allow remote attackers to inject arbitrary web script or HTML via the 1 id, 2 email, and 3 url parameter...
CVE-2004-2290
The CVE-2004-2290 issue affects Microsoft Windows XP Explorer. It arises when a user browses a self-executing folder containing HTML and script that references an executable within the folder, causing arbitrary code execution when the folder is accessed. The provided documents describe the vulner...
CVE-2005-2290
wpsshop.cgi in WPS Web Portal System 0.7.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 art and 2 cat variables...
CVE-2005-2290
CVE-2005-2290 affects WPS Web Portal System 0.7.0, where the CGI script wps_shop.cgi exposes arbitrary command execution via shell metacharacters in the art and cat parameters. This enables remote attackers to run commands on the vulnerable host. The provided sources confirm remote code execution...
CVE-2004-2290
Microsoft Windows XP Explorer allows attackers to execute arbitrary code via a HTML and script in a self-executing folder that references an executable file within the folder, which is automatically executed when a user accesses the folder...