156 matches found
CVE-2010-2697
Cross-site scripting XSS vulnerability in Sijio Community Software allows remote authenticated users to inject arbitrary web script or HTML via the title parameter when adding a new blog, related to editblog/index.php. NOTE: some of these details are obtained from third party information...
CVE-2010-2697
CVE-2010-2697 is a cross-site scripting (XSS) vulnerability in Sijio Community Software. The flaw lets remote authenticated users inject arbitrary web script or HTML through the title parameter when adding a new blog, related to edit_blog/index.php. The description notes this is an authenticated ...
CVE-2010-2697
Cross-site scripting XSS vulnerability in Sijio Community Software allows remote authenticated users to inject arbitrary web script or HTML via the title parameter when adding a new blog, related to editblog/index.php. NOTE: some of these details are obtained from third party information...
CVE-2010-2697
creationtimestamp| type| source ---|---|--- 2010-07-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14260...
CentOS Security Advisory CESA-2009:1364 (gdm)
The remote host is missing updates to gdm announced in advisory CESA-2009:1364. CESA-2009:1364 64939 2 $Id: ovcesa20091364.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:1364 gdm Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
RedHat Security Advisory RHSA-2009:1364
The remote host is missing updates announced in advisory RHSA-2009:1364. The GNOME Display Manager GDM is a configurable re-implementation of XDM, the X Display Manager. GDM allows you to log in to your system with the X Window System running, and supports running several different X sessions on...
RedHat Security Advisory RHSA-2009:1364
The remote host is missing updates announced in advisory RHSA-2009:1364. The GNOME Display Manager GDM is a configurable re-implementation of XDM, the X Display Manager. GDM allows you to log in to your system with the X Window System running, and supports running several different X sessions on...
CVE-2009-2697
CVE-2009-2697 is a vulnerability in the GNOME Display Manager (gdm) where the 64-bit build omits TCP wrappers support, potentially allowing bypass of access restrictions over XDMCP. Publicized in RHSA-2010:0657 (RHEL 4/5 line) and ELSA-2009-1364 (Oracle Linux 5), with CentOS/Scientific Linux advi...
CVE-2008-2697
SQL injection vulnerability in Joomla! Rapid Recipe (com_rapidrecipe) component affects versions 1.6.6 and 1.6.7, exploitable via the recipe_id parameter in the viewrecipe action to index.php. The underlying issue is improper handling of user input, enabling remote attackers to manipulate SQL com...
CVE-2008-2697
creationtimestamp| type| source ---|---|--- 2008-06-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5759...
CVE-2004-2697
Technical details for CVE-2004-2697 are not publicly available in the provided documents; monitor for updates.
CVE-2007-2697
The CVE affects BEA WebLogic Express and WebLogic Server: embedded LDAP server in versions 7.0–SP6, 8.1–SP5, 9.0, and 9.1. The issue is that failed authentication attempts are not limited or audited, enabling remote attackers to perform brute-force attacks on the administrator password or flood t...
CVE-2005-2697
CVE-2005-2697 affects MyBB (MyBulletinBoard) 1.00 Release Candidate 1–4. The vulnerability is an SQL injection in search.php via the uid parameter, allowing a remote attacker to manipulate SQL queries and potentially disclose or modify data. This CVE overlaps with CVE-2005-0282. Connected sources...
CVE-2005-2697
SQL injection vulnerability in search.php for MyBulletinBoard MyBB 1.00 Release Candidate 1 through 4 allows remote attackers to execute arbitrary SQL commands via the uid parameter. NOTE: this issue might overlap CVE-2005-0282...
CVE-2004-2697
The Inventory Scout daemon invscoutd 1.3.0.0 and 2.0.2 for AIX 4.3.3 and 5.1 allows local users to gain privileges via a symlink attack on a command line argument log file. NOTE: this might be related to CVE-2006-5002...
