376 matches found
CVE-2009-2400
SQL injection vulnerability in the PHP comphp component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...
CVE-2009-2400
CVE-2009-2400 is a documented SQL injection in the Joomla! PHP component com_php, exploitable via the id parameter to index.php. The vulnerability allows remote attackers to execute arbitrary SQL commands. The NVD entry lists a CVSS v2 base score of 7.5 (HIGH) with network attack vector and low c...
CVE-2008-2400
The connected Nessus entry confirms a Local Privilege Escalation in stunnel prior to 4.23 when run as a Windows service, allowing a local user to gain LocalSystem privileges due to an unspecified error. Affected software: stunnel.exe running as a service on Windows; root cause: unspecified error ...
CVE-2003-1386
AXIS 2400 Video Server 2.00 through 2.33 allows remote attackers to obtain sensitive information via an HTTP request to /support/messages, which displays the server's /var/log/messages file...
CVE-2003-1386
Affected product: Axis 2400 Video Server 2.00–2.33. The vulnerability allows remote attackers to obtain sensitive information by requesting /support/messages, which displays the server’s /var/log/messages log. This is a network-based information disclosure with low attack complexity and no authen...
CVE-2003-1386: Undefined Security Weakness
AXIS 2400 Video Server 2.00 through 2.33 allows remote attackers to obtain sensitive information via an HTTP request to /support/messages, which displays the server's /var/log/messages file...
CVE-2007-2400
Apple Safari affected: Safari 3 Beta up to 3.0.2 and iPhone Safari before 1.0.1. Root cause is a race condition during page updates and HTTP redirects, enabling cross-domain access and cross-site scripting via same-origin violations. Impact described as bypassing JavaScript security model and mod...
CVE-2007-2239
Stack-based buffer overflow in the SaveBMP method in the AXIS Camera Control aka CamImage ActiveX control before 2.40.0.0 in AxisCamControl.ocx in AXIS 2100, 2110, 2120, 2130 PTZ, 2420, 2420-IR, 2400, 2400+, 2401, 2401+, 2411, and Panorama PTZ allows remote attackers to cause a denial of service...
CVE-2007-2239: Undefined Security Weakness
Stack-based buffer overflow in the SaveBMP method in the AXIS Camera Control aka CamImage ActiveX control before 2.40.0.0 in AxisCamControl.ocx in AXIS 2100, 2110, 2120, 2130 PTZ, 2420, 2420-IR, 2400, 2400+, 2401, 2401+, 2411, and Panorama PTZ allows remote attackers to cause a denial of service...
CVE-2007-0932: Undefined Security Weakness
The 1 Aruba Mobility Controllers 200, 600, 2400, and 6000 and 2 Alcatel-Lucent OmniAccess Wireless 43xx and 6000 do not properly implement authentication and privilege assignment for the guest account, which allows remote attackers to access administrative interfaces or the WLAN...
CVE-2006-2400
The CVE-2006-2400 entry affects Outgun 1.0.3 bot version 2 and earlier, where the leetnet functions (leetnet/rudp.cpp) are vulnerable to crafted large packets sent over the network. This can cause an unhandled exception and result in a denial of service (game interruption). The available sources ...
CVE-2004-2400
Summary: CVE-2004-2400 affects WinFTP Server 1.6. The vulnerability arises because credentials (username and password) are stored in plaintext in the file data\user.wfd, allowing local users to obtain credentials. The NVD reports a low base score (2.1) with LOCAL attack vector and PARTIAL confide...
CVE-2005-2400
The CVE-2005-2400 entry concerns PHPFinance 0.3, where the inc.login.php script permits remote attackers to bypass authentication and gain privileges. The core issue is an authentication bypass in the login handling, leading to potential privilege escalation. Public references and metrics indicat...
CVE-2005-2400
The inc.login.php scripts in PHPFinance 0.3 allows remote attackers to bypass the login and gain privileges...