99 matches found
CVE-2009-2350
Microsoft Internet Explorer 6.0.2900.2180 and earlier does not block javascript: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting XSS attacks via vectors related to 1 injecting a Refresh header or 2 specifying the content of a Refresh header...
CVE-2009-2350
Technical details about CVE-2009-2350 are not provided in the connected documents; available content only notes that Internet Explorer 6 and earlier are vulnerable to javascript: Refresh header XSS. Monitor for updates.
CVE-2009-2350
creationtimestamp| type| source ---|---|--- 2009-06-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33063...
CVE-2008-2350
CVE-2008-2350 (CWE-style directory traversal) : Affected software is bcoos, specifically highlight.php versions 1.0.9–1.0.13. The vulnerability arises from an improper handling of the file parameter, enabling directory traversal via ".." sequences or Windows-style C: paths to read arbitrary local...
CVE-2008-2350
creationtimestamp| type| source ---|---|--- 2008-05-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31806...
CVE-2002-2350
CVE-2002-2350 involves an XSS vulnerability in Zorum 2.4. The affected code path is z_user_show.php within dbtreelistproperty_method.php, where the classifier parameter can be manipulated to inject arbitrary script or HTML. Exploitation details are not provided beyond the XSS claim; no exploit sp...
openSUSE 10 Security Update : gv (gv-2350)
The previous 'gv' update to fix a stack overflow did not completely fix the problem spotted. An attacker could still cause the handling to use up all system memory, or open windows much wider than the X display and crash. Code execution however was not possible. %NASLMINLEVEL 70300 C Tenable...
CVE-2007-2350
admin/config.php in the music-on-hold module in freePBX 2.2.x allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the del parameter...
CVE-2007-2350
admin/config.php in the music-on-hold module in freePBX 2.2.x allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the del parameter...
CVE-2007-2350
The CVE concerns admin/config.php in the music-on-hold module of freePBX 2.2.x. It allows a remote authenticated administrator to execute arbitrary commands via shell metacharacters in the del parameter, indicating input handling/sanitization flaws in that file. Impact is potential remote command...
CVE-2004-2350
The CVE-2004-2350 entry pertains to an SQL injection in phpBB’s search.php affecting phpBB 1.0 through 2.0.6 via the search_results parameter. The underlying vulnerability allows remote attackers to execute arbitrary SQL and potentially gain privileges, as described in the fixed-text CVE descript...
CVE-2004-2350
SQL injection vulnerability in search.php for phpBB 1.0 through 2.0.6 allows remote attackers to execute arbitrary SQL and gain privileges via the searchresults parameter...
CVE-2004-2077
Nadeo Game Engine for Nadeo TrackMania and Nadeo Virtual Skipper 3 allows remote attackers to cause a denial of service server crash via malformed data to TCP port 2350, possibly due to long values or incorrect size fields...
CVE-2004-2077
The CVE-2004-2077 entry affects Nadeo Game Engine used by TrackMania and Nadeo Virtual Skipper 3. It describes a remote denial-of-service condition caused by malformed data sent to TCP port 2350, with a suggested root cause of long values or incorrect size fields. The available connected sources ...
TrackMania DoS
random data to TCP/2350 causes program to crash...
Nadeo Game Engine - Remote Denial of Service
Nadeo Game Engine - Remote Denial of Service // source: https://www.securityfocus.com/bid/9604/info It has been reported that Nadeo Game Engine may be prone to a remote denial of service vulnerability that could allow an attacker to cause the software to crash or hang by sending arbitrary data to...
[Full-Disclosure] TrackMania Demo Denial of Service
TrackMania Demo Denial of Service The original document can be found at http://www.securiteinfo.com/attaques/hacking/trackmaniados.shtml .oO Overview Oo. TrackMania Demo Denial of Service Discovered on 2003, November, 30th Vendor: TrackMania Official website http://www.trackmania.com TrackMania i...
CVE-2004-2077
Nadeo Game Engine for Nadeo TrackMania and Nadeo Virtual Skipper 3 allows remote attackers to cause a denial of service server crash via malformed data to TCP port 2350, possibly due to long values or incorrect size fields...