CVE-2008-2294

The CVE-2008-2294 entry applies to Pet Grooming Management System 2.0. Affected component: useradded.php. Root cause: remote attackers can manipulate a request to set a modified username for the account “admin,” enabling privilege escalation. Documented impact: gain privileges (higher access) rem...

CVE-2008-2294

creationtimestamp| type| source ---|---|--- 2008-05-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5627...

Debian Security Advisory DSA 1358-1 (asterisk)

The remote host is missing an update to asterisk announced via advisory DSA 1358-1. OpenVAS Vulnerability Test $Id: deb13581.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1358-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

CVE-2007-2294

CVE-2007-2294 : The Manager Interface in Asterisk versions prior to 1.2.18 and prior to 1.4.3 is vulnerable. An attacker can cause a denial of service (crash) by using MD5 authentication to log in as a user that has no password defined in manager.conf, triggering a NULL pointer dereference. The v...

Solaris 9 (sparc) : 118829-04

Sun Management Center 3.5.1: Solaris 9 Oracle Patch. Date this patch was last updated by Sun : Jun/02/05 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc...

CVE-2006-2294

Cross-site scripting XSS vulnerability in Dynamic Galerie 1.0 allows remote attackers to inject arbitrary web script or HTML via the pfad parameter in 1 index.php and 2 galerie.php. NOTE: this issue might be resultant from directory traversal...

CVE-2006-2294

Dynamic Galerie 1.0 is affected by a Cross‑Site Scripting (XSS) vulnerability that can be triggered via the pfad parameter in index.php and galerie.php. The issue is likely related to directory traversal, enabling injection of arbitrary script/HTML by remote attackers. Affects the pfad handling i...

CVE-2004-2294

CVE-2004-2294 affects PHP-Nuke 6.0 through 7.3, where the send_review function in the Reviews module has a canonicalize-before-filter error. Text parameter processing allows remote attackers to inject arbitrary web script or HTML via hex-encoded XSS sequences after the text is checked for dangero...

CVE-2005-2294

Affected software: Oracle Forms on Unix (versions 4.5, 6.0, 6i, 9i). Vulnerability: when a large number of records are retrieved by an Oracle form, a copy of the database tables is stored in a world-readable temporary file. Root cause: insecure temporary file handling enabling a local user to rea...

CVE-2004-2294

Canonicalize-before-filter error in the sendreview function in the Reviews module for PHP-Nuke 6.0 to 7.3 allows remote attackers to inject arbitrary web script or HTML via hex-encoded XSS sequences in the text parameter, which is checked for dangerous sequences before it is canonicalized, leadin...

CVE-2002-2294

Multiple buffer overflows in Symantec Raptor Firewall 6.5 and 6.5.3, Enterprise Firewall 6.5.2 and 7.0, VelociRaptor 500/700/1000 and 1100/1200/1300, and Gateway Security 5110/5200/5300 allow remote attackers to cause a denial of service service termination via 1 malformed RealAudio rad packets...