CVE-2008-5869

The CVE-2008-5869 entry concerns the Proxim Wireless Tsunami MP.11 2411 with firmware 3.0.3, affected by a cross-site scripting (XSS) vulnerability exploitable by remote authenticated users via the system.sysName.0 SNMP OID. The issue allows injection of arbitrary web script or HTML. Public refer...

CVE-2008-2411

creationtimestamp| type| source ---|---|--- 2008-05-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5576...

CVE-2002-2411

CVE-2002-2411 concerns BannerWheel 1.0 where a buffer overflow in badmin.c allows remote code execution via a long rcmd command. The vulnerability enables arbitrary code execution with network access, no authentication, and could impact confidentiality, integrity, and availability. References ind...

CVE-2007-2411

Affected software: Sphider 1.2.x. Vulnerability: PHP remote file inclusion via index.php, using include_dir parameter to execute arbitrary PHP code. Root cause: remote inclusion in include_dir path. Impact: potential remote code execution with partial confidentiality/integrity/availability implic...

CVE-2006-2411

The vulnerability CVE-2006-2411 affects Raydium software prior to SVN revision 312, caused by a buffer overflow in the raydium_network_read function within network.c. Remote attackers can trigger arbitrary code execution by sending specially crafted packets containing long global variables to the...

CVE-2004-2411

The CVE-2004-2411 entry concerns VP-ASP Shopping Cart versions 4.0–5.0 where the CleanseMessage function in shop$db.asp does not adequately sanitize inputs. This permits remote XSS attacks that do not rely on traditional [removed] tags, demonstrated via javascript in IMG tags affecting the cat pa...

CVE-2005-2411

Cross-Site Request Forgery CSRF vulnerability in tDiary 2.1.1, and tDiary 2.0.1 and earlier, allows remote attackers to conduct actions as another user, and execute commands on the server, via a URL that is activated by the user...

CVE-2005-2411

Cross-Site Request Forgery CSRF vulnerability in tDiary 2.1.1, and tDiary 2.0.1 and earlier, allows remote attackers to conduct actions as another user, and execute commands on the server, via a URL that is activated by the user...

CVE-2005-2411

CVE-2005-2411 is a CSRF vulnerability in tDiary 2.1.1 and earlier (2.0.1 and older). A remote attacker can act as another user and even execute commands on the server via a URL the victim visits. Debian/DSA advisories indicate fixes in newer packages (e.g., 2.0.1-1sarge1, 2.0.2-1); upgrade to rem...

CVE-2005-2411

Cross-Site Request Forgery CSRF vulnerability in tDiary 2.1.1, and tDiary 2.0.1 and earlier, allows remote attackers to conduct actions as another user, and execute commands on the server, via a URL that is activated by the user...

CVE-2004-2411

The CleanseMessage function in shop$db.asp for VP-ASP Shopping Cart 4.0 through 5.0 does not sufficiently cleanse inputs, which allows remote attackers to conduct cross-site scripting XSS attacks that do not use tags, as demonstrated via javascript in IMG tags to 1 the cat parameter in...