CVE-2012-2402

CVE-2012-2402 affects WordPress up to version 3.3.1 (patched in 3.3.2). The flaw is in wp-admin/plugins.php, where remote authenticated site administrators could bypass access restrictions and deactivate network-wide plugins via unspecified vectors. The OpenVAS/Nessus/DSA references confirm this ...

Debian: Security Advisory (DSA-2402-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-2402

CVE-2011-2402 affects HP Network Automation versions 7.2x, 7.5x, 7.6x, 9.0 and 9.10 with a cross-site scripting (XSS) flaw reported. The vulnerability allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Seebug notes that exploitation could enable attackers to o...

HP Network Automation CVE-2011-2402跨站脚本漏洞

Bugtraq ID: 48922 CVE ID：CVE-2011-2402 HP Network Automation是一款自动化网络配置管理工具。 运行在Linux, Solaris和Windows平台下的HP Network Automation存在安全漏洞，允许攻击者进行跨站脚本攻击，攻击者可以获得敏感信息或劫持用户会话。 HP Network Automation 9.10 HP Network Automation 9.0 HP Network Automation 7.6 HP Network Automation 7.5 HP Network Automation 7.2...

CVE-2010-2402

CVE-2010-2402 affects Oracle PeopleSoft Enterprise PeopleTools, version 8.49.27. In the Oracle CPU July 2010 advisory, the risk matrix shows a Network-accessible web component (HTTP) that requires a valid session (authenticated) to exploit. The vulnerability impact is partial confidentiality and ...

CVE-2009-2402

SQL injection vulnerability in index.php in the forum module in PHPEcho CMS 2.0-rc3 allows remote attackers to execute arbitrary SQL commands via the id parameter in a thread action, a different vector than CVE-2008-0355...

CVE-2009-2402

CVE-2009-2402 affects PHPEcho CMS 2.0-rc3 in the forum module. The vulnerability is a SQL injection in index.php, exploitable via the id parameter in a thread action, allowing remote execution of arbitrary SQL commands. The description indicates a different vector from CVE-2008-0355, and CVE refe...

CVE-2009-2402

creationtimestamp| type| source ---|---|--- 2009-06-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9014...

iDefense Security Advisory 06.03.08: Sun Java System Active Server Pages Information Disclosure Vulnerability

iDefense Security Advisory 06.03.08 http://labs.idefense.com/intelligence/vulnerabilities/ Jun 03, 2008 I. BACKGROUND Sun Java System Active Server Pages is a multi-platform ASP application server. It provides provides ASP Active Server Pages functionality to a web server. More information is...

DSquare Exploit Pack: D2SEC_SUNASP1

Name| d2secsunasp1 ---|--- CVE| CVE-2008-2402 Exploit Pack| D2ExploitPack Description| Sun Java System Active Server Pages Information Disclosure Notes|...

CVE-2008-2402

The Admin Server in Sun Java Active Server Pages ASP Server before 4.0.3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to read password hashes and configuration data via direct requests for unspecified documents...

CVE-2008-2402

CVE-2008-2402 involves Sun Java System Active Server Pages (ASP) Server prior to 4.0.3. The Admin Server stores sensitive information under the web root with insufficient access control, allowing remote attackers to read password hashes and configuration data via direct requests for unspecified d...

CVE-2002-2402

The CVE-2002-2402 entry concerns SURECOM broadband router EP-4501, which ships with default SNMP community strings: read = “public” and read/write = “secret.” This default configuration allows remote attackers to read and modify router configuration information. The vulnerability is tied to the d...

CVE-2007-2402

CVE-2007-2402 affects QuickTime for Java in Apple QuickTime prior to 7.2. The vulnerability is a failure to perform sufficient access control, enabling remote attackers to obtain sensitive information (screen content) via crafted Java applets. The primary sources describe the issue as a design/lo...

CVE-2006-2402

CVE-2006-2402 : The vulnerability is a buffer overflow in the changeRegistration function of servernet.cpp in Outgun 1.0.3 bot 2 and earlier. By supplying a long string, remote attackers can change the registration information of other players. The connected documents confirm the same description...

CVE-2004-2402

CVE-2004-2402 affects YaBB 1 GOLD SP 1.3.2. YaBB.pl CGI is vulnerable to cross-site scripting via a hex-encoded to parameter; note that some sources claimed the board parameter is affected, but this is stated as incorrect in the primary description. Connected sources corroborate multiple vulnerab...

CVE-2005-2402

The CVE-2005-2402 entry describes a Cross-site scripting (XSS) vulnerability in PHPSiteSearch 1.7.7d, specifically in search.php, where an attacker can inject arbitrary web script or HTML through the query parameter. The underlying issue is unescaped input in the search parameter that is echoed b...