CVE-2010-3012

HP System Management Homepage (SMH) is affected by multiple vulnerabilities prior to version 6.2, including CVE-2010-3012 (XSS) and related issues. The SMH component’s self-reported pre-6.2 builds are susceptible to remote injection of script/HTML via unspecified vectors, and multiple CVEs are re...

Cross site scripting

Cross-site scripting XSS vulnerability on the HP 3Com OfficeConnect Gigabit VPN Firewall 3CREVF100-73 with firmware before 1.0.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: a separate XSS issue for HP System Management Homepage SMH was originally...

Mozilla Firefox 'data:' URI XSS Vulnerability (Sep 2009) - Linux

Mozilla Firefox is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2009-3012

The CVE-2009-3012 entry affects Mozilla Firefox 3.0.13 and earlier, 3.5, 3.6 a1 pre, and 3.7 a1 pre. The vulnerability arises because Firefox does not properly block data: URIs in Location headers in HTTP responses, enabling remote XSS via two vectors: (1) a Location header containing a data:text...

CVE-2008-3012

CVE-2008-3012 corresponds to an in-GDI+ memory allocation flaw in gdiplus.dll that could allow remote code execution when a specially crafted EMF image is viewed. Connected docs confirm this as MS08-052, addressing vulnerabilities in GDI+ across Windows and Office components (IE6, Windows XP, Ser...

MS08-052: Vulnerabilities in GDI+ Could Allow Remote Code Execution (954593)

The remote host is running a version of Windows that has multiple buffer overflow vulnerabilities when viewing VML, EMF, GIF, WMF and BMP files that could allow an attacker to execute arbitrary code on the remote host. To exploit these flaws, an attacker would need to send a malformed image file ...

Microsoft Windows GDI+ EMF Parsing Memory Corruption (MS08-052; CVE-2008-3012)

Enhanced Metafile EMF is an image format that can contain both vector information and bitmap information. A remote code execution vulnerability has been discovered in the way GDI+ handles EMF image files. The vulnerability is due to a memory corruption error in GDI+ that fails to properly process...

[Full-disclosure] Fujitsu-Siemens PRIMERGY BX300 Switch Blade Information Disclosure

Advisory: Fujitsu-Siemens PRIMERGY BX300 Switch Blade Information Disclosure RedTeam Pentesting discovered an information disclosure in the Fujitsu- Siemens BX300 Switch Blade during a penetration test. By accessing URLs of the web interface directly and aborting the authentication dialog, one is...

rt-sa-2006-004.txt

Advisory: Authentication bypass in phpBannerExchange RedTeam identified two SQL injections in phpBannerExchange. It is possible to bypass user authentication with them. Details ======= Product: phpBannerExchange Affected Versions: All versions up to phpBannerExchange 2.0 RC5 Fixed Versions: 2.0 R...

CVE-2006-3012

SQL injection vulnerability in phpBannerExchange before 2.0 Update 6 allows remote attackers to execute arbitrary SQL commands via the 1 login parameter in a client/stats.php and b admin/stats.php, or the 2 pass parameter in client/stats.php...

CVE-2006-3012

The CVE-2006-3012 entry concerns phpBannerExchange prior to 2.0 Update 6, with SQL injection via user-supplied input in client/stats.php and admin/stats.php (login) or client/stats.php (pass). The root cause is unsanitized input used to construct SQL queries, allowing remote attackers to alter qu...

[Full-disclosure] Advisory: Authentication bypass in phpBannerExchange

Advisory: Authentication bypass in phpBannerExchange RedTeam identified two SQL injections in phpBannerExchange. It is possible to bypass user authentication with them. Details ======= Product: phpBannerExchange Affected Versions: All versions up to phpBannerExchange 2.0 RC5 Fixed Versions: 2.0 R...

CVE-2005-3012

The CVE-2005-3012 issue affects SimpleCDR-X 1.3.3 via MasterDataCD::createImage, where the .temp directory is created with insecure permissions, enabling local users to read sensitive ISO images. No exploit details or explicit mitigation are provided in the connected documents. Summary of impact ...