71 matches found
Sql injection
SQL injection vulnerability in admincp/admincalendar.php in vBulletin 3.7.3.pl1 allows remote authenticated administrators to execute arbitrary SQL commands via the holidayinforecurring parameter, a different vector than CVE-2005-3022...
CVE-2008-3022
CVE-2008-3022 describes multiple PHP remote file inclusion vulnerabilities in PHPortal 1.2 Beta, specifically in sablonlar/gunaysoft/gunaysoft.php, allowing an attacker to execute arbitrary PHP code by passing a URL via parameters icerikyolu, sayfaid or uzanti. The underlying issue is inclusion o...
CVE-2008-3022
creationtimestamp| type| source ---|---|--- 2008-07-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5996...
SuSE 10 Security Update : krb5-apps-servers (ZYPP Patch Number 3022)
When using the krb5 telnet daemon it was possible for remote attackers to override authentication mechanisms and gain root access to the machine by supplying a special username. This is tracked by the Mitre CVE ID CVE-2007-0956. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text...
SYM07-011 Symantec Reporting Server password disclosure
SYM07-011: Symantec Reporting Server Password Disclosure June 5, 2007 Risk Impact: Medium Remote Access: Yes Local Access: Yes Authentication Required:Yes Exploit available: No Overview The administrator password for Symantec Reporting Server could be disclosed after a failed login attempt...
CVE-2007-3022
Symantec Reporting Server (versions affected: 1.0.197.0 up to 1.0.224.0), used with Symantec Client Security 3.1 and SAV CE 10.1, discloses the password hash for a user after a failed login. This plaintext-like disclosure enables brute-force attempts and could let an attacker gain access to the R...
Symantec Reporting Server Password Disclosure
SUMMARY The administrator password for Symantec Reporting Server could be disclosed after a failed login attempt. Risk Impact Medium Remote Access | Yes ---|--- Local Access | Yes Authentication Required | Yes Exploit publicly available | No AFFECTED PRODUCTS Affected Products Product | Affected...
CVE-2006-3022
CVE-2006-3022 is an XSS vulnerability in zoom.php of fipsGallery 1.5 and earlier. The issue arises via the path parameter, enabling remote attackers to inject arbitrary web script or HTML. Affected product/version: fipsGallery 1.5 and earlier (component: zoom.php). Underlying impact: shows partia...
CVE-2006-3022
Cross-site scripting XSS vulnerability in zoom.php in fipsGallery 1.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the path parameter...
CVE-2005-3022
Affects vBulletin 3.0.9 and earlier. Multiple SQL injection vectors exist in the product, exploitable via parameters to specific PHP scripts: announcement.php (announcement), user.php (userid), admincalendar.php (calendar), cronlog.php (cronid), email.php (usergroupid), help.php (help), language....