CVE-2010-2887

Multiple unspecified vulnerabilities in Adobe Reader and Acrobat 9.x before 9.4 on Linux allow attackers to gain privileges via unknown vectors...

CVE-2010-2887

Adobe Reader and Acrobat 9.x on Linux are affected by multiple vulnerabilities, including CVE-2010-2887, that can allow privilege escalation via unspecified vectors. The issue is tied to older 9.x builds prior to 9.4; remediation involves upgrading to a newer version (e.g., acroread-9.4.1 or late...

CVE-2009-2887

CVE-2009-2887 describes a Cross-site scripting (XSS) vulnerability in bios.php of PHP Scripts Now President Bios. The vulnerability allows remote attackers to inject arbitrary web script or HTML via the rank parameter. The NVD entry provides a CVSS v2 base score of 4.3 (Medium) with network attac...

CVE-2008-2887

The CVE-2008-2887 entry describes a directory traversal in index.php of chaozz@work FubarForum 1.5 that allows remote attackers to include and execute arbitrary local files via a .. in the page parameter. Affected software: FubarForum 1.5 (chaozz@work). Root cause: improper handling of page param...

CVE-2008-2887

Directory traversal vulnerability in index.php in chaozz@work FubarForum 1.5 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter...

Allied Telesyn TFTP Server 1.9 Long Filename Overflow

This module exploits a stack buffer overflow in AT-TFTP v1.9, by sending a request get/write for an overly long file name. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Allied Telesyn TFTP...

CVE-2007-2887

CVE-2007-2887 is a cross-site scripting (XSS) vulnerability in the Web Icerik Yonetim Sistemi (WIYS) 1.0, affecting the index.php page. The issue is exploitable via the No parameter on the Sayfa page, allowing remote attackers to inject arbitrary web script or HTML. The connected records confirm ...

CVE-2006-2887

CVE-2006-2887 affects myNewsletter 1.1.2 and earlier, where the UserName parameter in validatelogin.asp and adminlogin.asp is vulnerable to SQL injection. The underlying issue is improper input handling that allows remote attackers to inject arbitrary SQL commands, enabling credential bypass or d...

CVE-2005-2887

MAXdev MD-Pro 1.0.73 (and possibly earlier) is vulnerable to information disclosure via direct requests to wiki.php, AutoTheme, Blocks, admin.php, pnadmin.php, or Topics directories, where an error message reveals the path. No remediation details are provided in the supplied documents.