91 matches found
Shockwave Player < 11.5.9.620 (APSB11-01)
The remote Windows host contains a version of Adobe's Shockwave Player that is earlier than 11.5.9.620. Such versions are potentially affected by the following issues : - Several unspecified errors exist in the 'dirapi.dll' module that may allow arbitrary code execution. CVE-2010-2587,...
CVE-2009-2587
Multiple cross-site scripting XSS vulnerabilities in DragDropCart allow remote attackers to inject arbitrary web script or HTML via the 1 sid parameter to assets/js/ddcart.php, the 2 prefix parameter to includes/ajax/getstate.php, the search parameter to 3 index.php and 4 search.php, the 5 redire...
CVE-2009-2587
CVE-2009-2587 describes multiple cross-site scripting (XSS) vulnerabilities in DragDropCart. The vulnerabilities allow remote attackers to inject arbitrary web script or HTML via specific parameters in several pages: (1) sid in assets/js/ddcart.php, (2) prefix in includes/ajax/getstate.php, (3) s...
CVE-2009-2587
creationtimestamp| type| source ---|---|--- 2009-07-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34734 2009-07-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34730 2009-07-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34731 2009-07-20...
CVE-2008-2587
CVE-2008-2587 affects Oracle Database Advanced Replication in 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3. The vulnerability allows local access to read trace files (local attack vector) with a low impact (read access, Partial confidentiality). CVSS 2.0 base score is 1.5 (LOW). The ...
CVE-2007-2587
The CVE-2007-2587 issue concerns Cisco IOS’s built‑in IOS FTP Server (affected: Cisco IOS 11.3 through 12.4). The root cause is described as multiple vulnerabilities that can lead to a denial of service (IOS reload) when transferring files, exploited by remote authenticated users. Connected sourc...
CVE-2006-2599
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2006-2587. Reason: This candidate is a duplicate of CVE-2006-2587. Notes: All CVE users should reference CVE-2006-2587 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2006-2587
AFFECTED SOFTWARE: PunkBuster WebTool HTTP server component (before 1.229) used by multiple titles (America’s Army 1.228 and earlier; Battlefield 1942 1.158 and earlier; Battlefield 2 1.184 and earlier; Battlefield Vietnam 1.150 and earlier; Call of Duty 1.173 and earlier; Call of Duty 2 1.108 an...
CVE-2004-2587
Vulnerability summary for CVE-2004-2587: SmarterTools SmarterMail versions 1.6.1511 and 1.6.1529 are affected. The issue lies in login.aspx, where a long txtusername parameter can be used by a remote attacker to cause a denial of service (potentially via a buffer overflow).Impact is limited to av...
CVE-2005-2587
PHPTB Topic Boards 2.0 is affected by a SQL injection in emailvalidate.php that allows remote attackers to execute arbitrary SQL commands via the mid parameter. Root cause is improper input handling in emailvalidate.php leading to SQL manipulation. Documented impact includes potential exposure or...
