CVE-2004-2364

CVE-2004-2364 affects PHPX versions 3.0–3.2.6. A CSRF flaw lets remote attackers cause the administrator to trigger commands via specific admin URLs (admin/page.php, admin/news.php, admin/user.php, admin/images.php, admin/forums.php). The vulnerability’s root cause is CSRF that executes privilege...

CVE-2005-2364

CVE-2005-2364 affects Ethereal (1) GIOP dissector, (2) WBXML, (3) CAMEL dissector. The connected docs confirm a null pointer dereference in the WBXML and GIOP dissectors causing denial of service when processing crafted packets. Affected versions are Ethereal 0.8.20 through 0.10.11. Remediation i...

CVE-2002-2364

Cross-site scripting XSS vulnerability in PHP Ticket 0.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a help ticket...