CVE-2009-2601

CVE-2009-2601 : SQL injection in the Joomlaequipment (aka JUser or com_juser) component 2.0.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a show_profile action to index.php. Related references include Exploit-DB and SecurityFocus. No further remed...

CVE-2009-2601

SQL injection vulnerability in the Joomlaequipment aka JUser or comjuser component 2.0.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showprofile action to index.php...

CVE-2008-2601

Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 12.0.4 has unknown impact and remote authenticated attack vectors...

CVE-2008-2601

CVE-2008-2601 affects Oracle iStore in Oracle E-Business Suite 12.0.4. The vulnerability is listed under Oracle E-Business Suite risk matrix with HTTP access requiring a valid session; it is not remotely exploitable (Remote Exploit with Auth? = No) and has a CVSS v2 base score of 5.5 (Confidentia...

ZyXEL ZyWALL Quagga/Zebra (default pass) Remote Root Vulnerability

No description provided by source. Name: ZyXEL ZyWALL Quagga/Zebra Remote Root Vulnerability Release Date: 10 March 2008 Discover: Pranav Joshi [email protected] Vendor: ZyXEL Products Affected: ZyWALL Status on other affected products & firmwares pending from vendor’s end CVE-2008-1160 BID...

ZYXEL ZyWALL QuaggaZebra - Default Password Remote Code Execution

ZYXEL ZyWALL QuaggaZebra - Default Password Remote Code Execution Name: ZyXEL ZyWALL Quagga/Zebra Remote Root Vulnerability Release Date: 10 March 2008 Discover: Pranav Joshi Vendor: ZyXEL Products Affected: ZyWALL Status on other affected products & firmwares pending from vendor’s end...

ZYXEL ZyWALL Quagga/Zebra - 'Default Password' Remote Code Execution

Name: ZyXEL ZyWALL Quagga/Zebra Remote Root Vulnerability Release Date: 10 March 2008 Discover: Pranav Joshi Vendor: ZyXEL Products Affected: ZyWALL Status on other affected products & firmwares pending from vendor’s end CVE-2008-1160 BID 28184 --------------------------- Technical Details...

openSUSE 10 Security Update : pam (pam-2601)

A bug in pamunix module allowed users under certain circumstances to log in although their account was locked. pamunix is not used on openSUSE by default though CVE-2007-0003. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracte...

CVE-2007-2601

CVE-2007-2601 is tied to a buffer overflow in the GDivX Zenith Player’s AviFixer ActiveX control (the fix.dll 1.0.0.1 component). The vulnerability allows remote attackers to execute arbitrary code by supplying a long value to the SetInputFile property. This is supported by multiple connected sou...

CVE-2006-2601

CVE-2006-2601 is rejected/not used; this candidate is a duplicate of CVE-2006-2589 and not an active entry.

CVE-2004-2601

UberTec Help Center Live (HCL) is affected by a PHP remote file inclusion vulnerability (CVE-2004-2601). The issue arises from the SKIN_inner parameter in inc/skin.php, which can be manipulated via a URL to read local files and potentially execute PHP code on the server. Impact, per sources, is r...

CVE-2005-2601

CVE-2005-2601 describes an SQL injection in MidiCart (ASP Shopping Cart). The vulnerability allows remote attackers to issue arbitrary SQL via the code_no parameter to Item_Show.asp or search_list.asp. This is a server-side data handling flaw that can impact confidentiality, integrity and availab...