CVE-2010-2686

CVE-2010-2686 affects SAP TopManage OLK module 1.91.30. Multiple SQL injection vulnerabilities exist in clientes.asp, allowing remote attackers to execute arbitrary SQL commands via (1) PriceFrom, (2) PriceTo, and (3) InvFrom parameters reachable from olk/c_p/searchCart.asp and other vectors duri...

CVE-2009-2686

Technical details for CVE-2009-2686 are not publicly available in the provided documents. Monitor for updates on affected products, impact, and remediation.

CVE-2009-2686

Unspecified vulnerability in HP NonStop G06.12.00 through G06.32.00, H06.08.00 through H06.18.01, and J06.04.00 through J06.07.01 allows local users to gain privileges, cause a denial of service, or obtain "access to data" via unknown vectors...

Fedora 10 : mod_security-2.5.9-1.fc10 (2009-2686)

Security fixes for potential denials of service when using PDF XSS protection as well as when parsing multipart requests. http://sourceforge.net/project/shownotes.php?releaseid=667542&groupi d=68846 Note that Tenable Network Security has extracted the preceding description block directly from the...

Fedora Core 10 FEDORA-2009-2686 (mod_security)

The remote host is missing an update to modsecurity announced via advisory FEDORA-2009-2686. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C b...

CVE-2008-2686

webinc/bxe/scripts/loadsave.php in Flux CMS 1.5.0 and earlier allows remote attackers to execute arbitrary code by overwriting a PHP file in webinc/bxe/scripts/ via a filename in the XML parameter and PHP sequences in the request body, then making a direct request for this filename...

CVE-2008-2686

CVE-2008-2686 affects Flux CMS up to version 1.5.0 and earlier. The flaw allows remote code execution by overwriting a PHP file in webinc/bxe/scripts/ via a filename in the XML parameter and PHP sequences in the request body, followed by a direct request for the crafted filename. The NVD entry do...

CVE-2008-2686

creationtimestamp| type| source ---|---|--- 2008-06-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5767...

Fedora 7 : openvrml-0.16.6-3.fc7 (2007-2686)

Wed Oct 24 2007 Braden McDaniel - 0.16.6-3 - Updated firefox dependency to 2.0.0.8. - Thu Jun 7 2007 Braden McDaniel - 0.16.6-2 - Updated firefox dependency to 2.0.0.5. - Thu Jun 7 2007 Braden McDaniel - 0.16.6-1 - Updated to 0.16.6. - Thu Jun 7 2007 Braden McDaniel - 0.16.5-1 - Updated to...

CVE-2004-2686

Vulnerability CVE-2004-2686 affects the Solaris kernel (versions 2.6, 7, 8, 9) in the vfs_getvfssw function. It describes a directory traversal that allows local users to load arbitrary kernel modules via crafted mount or sysfs system calls, enabling privilege escalation. The note mentions it mig...

jetboxcms21-xss.txt

netVigilance Security Advisory 29 Jetbox CMS version 2.1 XSS Attack Vulnerability Description: Jetbox CMS is seriously tested on usability & has a professional intuitive interface. The system is role based, with workflow and module orientated. All content is fully separated from layout. It uses p...

CVE-2007-2686

CVE-2007-2686 describes a Cross‑Site Scripting (XSS) vulnerability in Jetbox CMS 2.1. The flaw is in index.php, where an attacker can inject arbitrary web script or HTML via the login parameter in the sendpwd task. Affected product: Jetbox CMS 2.1. Reported impact per sources is XSS with potentia...

CVE-2006-2686

CVE-2006-2686 affects ActionApps 2.8.1 and enables PHP remote file inclusion via the GLOBALS[AA_INC_PATH] parameter across multiple scripts (cached.php3, cron.php3, discussion.php3, filldisc.php3, filler.php3, fillform.php3, go.php3, hiercons.php3, jsview.php3, live_checkbox.php3, offline.php3, p...

CVE-2005-2686

CVE-2005-2686 describes a directory traversal vulnerability in SaveWebPortal 3.4. Remote attackers can cause arbitrary file inclusion and execute local PHP programs by supplying ".." sequences in the SITE_Path parameter to menu_dx.php or the CONTENTS_Dir parameter to menu_sx.php. Affected softwar...