926 matches found
CVE-2006-1553
SQL injection vulnerability in functions/finalfunctions.php in VSNS Lemon 3.2.0, with magicquotesgpc disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2006-1553
VSNS Lemon 3.2.0 is affected by CVE-2006-1553 due to an SQL injection in functions/final_functions.php when magic_quotes_gpc is disabled. The vulnerable parameter is id, enabling remote attackers to inject arbitrary SQL commands. This is a server-side input validation flaw in the PHP code path ha...
CVE-2006-1554
Cross-site scripting XSS vulnerability in VSNS Lemon 3.2.0 allows remote attackers to inject arbitrary web script or HTML via the name parameter while adding a comment...
CVE-2005-3004
CVE-2005-3004 describes a SQL injection in Interakt MX Shop 3.2.0. The vulnerability is in the pages module of index.php, exploitable via the parameters (1) idp, (2) id_ctg, or (3) id_prd. The affected product is Interakt MX Shop 3.2.0. The documented impact is the ability to execute arbitrary SQ...
CVE-2005-2494
kcheckpass in KDE 3.2.0 up to 3.4.2 allows local users to gain root access via a symlink attack on lock files...
CVE-2002-0952
Affected product/versions: Cisco ONS15454 optical transport platform running ONS 3.1.0–3.2.0. Vulnerability: Remote attackers can cause a denial of service (reset) by sending IP packets with non‑zero TOS bits to the Timing Control Card (TCC) LAN interface. Root cause (as stated): Improper handlin...