CVE-2010-2594

Multiple cross-site request forgery CSRF vulnerabilities in the web management interface in InterSect Alliance Snare Agent 3.2.3 and earlier on Solaris, Snare Agent 3.1.7 and earlier on Windows, Snare Agent 1.5.0 and earlier on Linux and AIX, Snare Agent 1.4 and earlier on IRIX, Snare Epilog 1.5....

CVE-2010-2594

The CVE-2010-2594 issue affects InterSect Alliance Snare Agent and Epilog products across Solaris, Windows, Linux/AIX, IRIX and UNIX variants. Description and connected records confirm multiple CSRF vulnerabilities in the web management interface that allow remote attackers to hijack administrato...

CVE-2009-2594

Cross-site scripting XSS vulnerability in censura.php in Censura 1.16.04 allows remote attackers to inject arbitrary web script or HTML via the itemid parameter in a details action...

CVE-2009-2594

CVE-2009-2594 is an XSS vulnerability in censura.php (Censura 1.16.04) that lets remote attackers inject arbitrary web script or HTML via the itemid parameter in a details action. Affected component: censura.php in Censura 1.16.04. Root cause/attack method not explicitly detailed beyond XSS. Impa...

CVE-2009-2594

creationtimestamp| type| source ---|---|--- 2009-07-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9129...

CVE-2008-2594

CVE-2008-2594 is an Oracle Portal vulnerability in Oracle Application Server 10g (10.1.2.3 and 10.1.4.2). The Oracle Application Server risk matrix lists CVE-2008-2594 as affecting Oracle Portal over HTTP with network-vector exploitation and no authentication required, scoring 6.4 (CVSS v2) and i...

CVE-2007-2594

CVE-2007-2594 describes a remote file inclusion in phpMyPortal 3.0.0 RC3, specifically in inc/articles.inc.php, where the attacker can supply a URL via the GLOBALS[CHEMINMODULES] parameter to execute arbitrary PHP code. This allows remote code execution on the affected system. The vulnerability’s...

CVE-2006-2594

...

CVE-2006-2594

The CVE-2006-2594 entry is a duplicate of CVE-2006-2582 and in public records is superseded; however, connected documents describe the underlying vulnerability in RWiki. Specifically, the editing form in RWiki 2.1.0pre1 through 2.1.0 allows remote attackers to execute arbitrary Ruby code via unkn...

CVE-2004-2594

CVE-2004-2594 affects the Quake II server on Windows prior to R1Q2. The vulnerability is an absolute path traversal in the server’s file access, allowing a remote attacker to read arbitrary files by including a "/" sequence in a pathname (example: download /server.cfg). The CVSS data indicates ne...

CVE-2005-2594

CVE-2005-2594 affects Apple Safari 1.3 (132) on Mac OS X 1.3.9. The vulnerability allows remote attackers to cause a denial of service (crash) through certain Javascript, possibly involving a function that defines a handler for itself within the function body. The connected documents provide the ...

CVE-2004-2594

Absolute path traversal vulnerability in Quake II server before R1Q2 on Windows, as used in multiple products, allows remote attackers to read arbitrary files via a "/" in a pathname argument, as demonstrated by "download /server.cfg"...