CVE-2010-2402

CVE-2010-2402 affects Oracle PeopleSoft Enterprise PeopleTools, version 8.49.27. In the Oracle CPU July 2010 advisory, the risk matrix shows a Network-accessible web component (HTTP) that requires a valid session (authenticated) to exploit. The vulnerability impact is partial confidentiality and ...

CVE-2009-2402

SQL injection vulnerability in index.php in the forum module in PHPEcho CMS 2.0-rc3 allows remote attackers to execute arbitrary SQL commands via the id parameter in a thread action, a different vector than CVE-2008-0355...

CVE-2009-2402

CVE-2009-2402 affects PHPEcho CMS 2.0-rc3 in the forum module. The vulnerability is a SQL injection in index.php, exploitable via the id parameter in a thread action, allowing remote execution of arbitrary SQL commands. The description indicates a different vector from CVE-2008-0355, and CVE refe...

CVE-2009-2402

creationtimestamp| type| source ---|---|--- 2009-06-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9014...

iDefense Security Advisory 06.03.08: Sun Java System Active Server Pages Information Disclosure Vulnerability

iDefense Security Advisory 06.03.08 http://labs.idefense.com/intelligence/vulnerabilities/ Jun 03, 2008 I. BACKGROUND Sun Java System Active Server Pages is a multi-platform ASP application server. It provides provides ASP Active Server Pages functionality to a web server. More information is...

DSquare Exploit Pack: D2SEC_SUNASP1

Name| d2secsunasp1 ---|--- CVE| CVE-2008-2402 Exploit Pack| D2ExploitPack Description| Sun Java System Active Server Pages Information Disclosure Notes|...

CVE-2008-2402

The Admin Server in Sun Java Active Server Pages ASP Server before 4.0.3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to read password hashes and configuration data via direct requests for unspecified documents...

CVE-2008-2402

CVE-2008-2402 involves Sun Java System Active Server Pages (ASP) Server prior to 4.0.3. The Admin Server stores sensitive information under the web root with insufficient access control, allowing remote attackers to read password hashes and configuration data via direct requests for unspecified d...

CVE-2002-2402

The CVE-2002-2402 entry concerns SURECOM broadband router EP-4501, which ships with default SNMP community strings: read = “public” and read/write = “secret.” This default configuration allows remote attackers to read and modify router configuration information. The vulnerability is tied to the d...

CVE-2007-2402

CVE-2007-2402 affects QuickTime for Java in Apple QuickTime prior to 7.2. The vulnerability is a failure to perform sufficient access control, enabling remote attackers to obtain sensitive information (screen content) via crafted Java applets. The primary sources describe the issue as a design/lo...

CVE-2006-2402

CVE-2006-2402 : The vulnerability is a buffer overflow in the changeRegistration function of servernet.cpp in Outgun 1.0.3 bot 2 and earlier. By supplying a long string, remote attackers can change the registration information of other players. The connected documents confirm the same description...

CVE-2004-2402

CVE-2004-2402 affects YaBB 1 GOLD SP 1.3.2. YaBB.pl CGI is vulnerable to cross-site scripting via a hex-encoded to parameter; note that some sources claimed the board parameter is affected, but this is stated as incorrect in the primary description. Connected sources corroborate multiple vulnerab...

CVE-2005-2402

The CVE-2005-2402 entry describes a Cross-site scripting (XSS) vulnerability in PHPSiteSearch 1.7.7d, specifically in search.php, where an attacker can inject arbitrary web script or HTML through the query parameter. The underlying issue is unescaped input in the search parameter that is echoed b...