89 matches found
CVE-2009-2675
The CVE-2009-2675 entry concerns an integer overflow in the unpack200 utility of Sun Java Runtime Environment (JRE) / JDK. Affected: JRE/JDK 6 before Update 15 and JRE/JDK 5.0 before Update 20. Root cause: heap-based buffer overflow during decompression triggered by crafted Pack200 headers (unspe...
CVE-2008-2675
CVE-2008-2675 describes a Cross-site scripting (XSS) vulnerability in index.php of PHP Image Gallery, where an attacker can inject arbitrary web script or HTML through the action parameter. This refers to the vulnerable file and parameter but does not provide version numbers or explicit root caus...
CVE-2007-2675
CVE-2007-2675 concerns a SQL injection in the file search.php of Pre Classifieds Listings 1.0 , where an attacker can supply the category parameter to execute arbitrary SQL. The vulnerability is exploitable remotely with network access and low authentication requirements, potentially impacting co...
CVE-2004-2675
ArGoSoft FTP Server vulnerable before 1.4.1.6. Remote authenticated users can crash the server by issuing SITE PASS with a long password, leading to database corruption. Affected: ArGoSoft FTP Server
CVE-2006-2675
PHP remote file inclusion vulnerability in ubbt.inc.php in UBBThreads 5.x and 6.x allows remote attackers to execute arbitrary PHP code via a URL in the 1 thispath or 2 configdir parameters...
CVE-2006-2675
The CVE-2006-2675 entry concerns PHP remote file inclusion in the UBBThreads product (versions 5.x and 6.x). The vulnerability arises from using unsanitized input in the thispath and configdir parameters of ubbt.inc.php, allowing an attacker to cause arbitrary PHP code execution by supplying a cr...
Land Down Under <= 801 Multiple Vulnerabilities
Land Down Under is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2006 Josh Zlatin-Amishav Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2005-2675
CVE-2005-2675 corresponds to multiple SQL injection vulnerabilities in Land Down Under (LDU) 800/800-series in which remote attackers could manipulate SQL queries via various PHP script parameters (forums.php, list.php, journal.php, forums.php, links.php). OpenVAS/Nessus entries corroborate SQLi ...
CVE-2004-2675
ArGoSoft FTP Server before 1.4.1.6 allows remote authenticated users to cause a denial of service crash via a SITE PASS command with a long password parameter, which causes the database to be corrupted...