73 matches found
CVE-2010-3097
Directory traversal vulnerability in WinFrigate Frigate 3 FTP client 3.36 and earlier allows remote FTP servers to overwrite arbitrary files via a ".." dot dot backslash in a filename...
CVE-2010-3097
WinFrigate Frigate 3 FTP client , version 3.36 and earlier, is affected by a directory traversal vulnerability that allows a remote FTP server to overwrite arbitrary files using a filename containing "..\". The root cause is insufficient sanitization of downloaded filenames. Exploitation requires...
CVE-2009-3097
Technical details about CVE-2009-3097 are not publicly available in the provided documents. Monitor for updates from vendors and security advisories before drawing conclusions on impact, affected products, or remediations.
CVE-2008-3097
CVE-2008-3097 affects the Drupal Tinytax module (Tinytax taxonomy block) versions 5.x prior to 5.x-1.10-1. The vulnerability is an XSS flaw where remote authenticated users can inject arbitrary web script or HTML by crafting a taxonomy term. The impact is cross-site scripting with no listed explo...
CVE-2008-3097
Cross-site scripting XSS vulnerability in the Tinytax module aka Tinytax taxonomy block 5.x before 5.x-1.10-1 for Drupal allows remote authenticated users to inject arbitrary web script or HTML, probably by creating a crafted taxonomy term...
CVE-2007-3097
my.activation.php3 in F5 FirePass 4100 SSL VPN allows remote attackers to execute arbitrary shell commands via shell metacharacters in the username parameter...
CVE-2007-3097
FirePass (4100 SSL VPN) my.activation.php3 login page suffers a cross-site scripting (XSS) vulnerability due to insufficient sanitization of URL arguments, enabling attacker-controlled HTML/JavaScript when a user follows a crafted link. F5 advisory SOL6919 states this was fixed in maintenance ver...
CVE-2007-3097
my.activation.php3 in F5 FirePass 4100 SSL VPN allows remote attackers to execute arbitrary shell commands via shell metacharacters in the username parameter...
SOL6919 - Cross-site scripting vulnerability in my.activation.php3 CVE-2007-3097
A cross-site scripting XSS vulnerability exists in the FirePass my.activation.php3 logon page.The affected FirePass logon URL fails to fully sanitize certain URL arguments before the requested web page content is returned to the browser. It is possible for an attacker to create web pages, emails ...
CVE-2006-3097
CVE-2006-3097 affects HP-UX running Support Tools Manager (xstm, cstm, stm) on HP-UX B.11.11 and B.11.23. The issue is a local denial-of-service by an unspecified vulnerability in the Tools Manager, with the impact of Denial of Service. Connected documents identify affected components and version...
CVE-2005-3097
Directory traversal vulnerability in Avi Alkalay contribute.cgi aka contribute.pl, dated 16 Jun 2002, allows remote attackers to overwrite arbitrary files via ".." sequences in the contribdir variable...