73 matches found
CVE-2012-3203
CVE-2012-3203 is an unspecified vulnerability in Oracle Solaris 11 that allows local users to affect availability, linked to the Gnome Display Manager (GDM). Public details in the connected documents confirm the issue is described as affecting Solaris 11 with GDM and do not provide concrete explo...
SuSE 11 / 11.1 Security Update : freetype2 (SAT Patch Numbers 3202 / 3203)
When loading specially crafted font files applications linked against freetype2 could crash or potentially even execute arbitrary code CVE-2010-3311 / CVE-2010-3053 / CVE-2010-3054. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks i...
CVE-2010-3203
The CVE-2010-3203 entry describes a directory traversal vulnerability in the Joomla! component PicSell 1.0 (com_picsell). The issue is triggered via the dflink parameter in a prevsell dwnfree action to index.php, allowing remote attackers to read arbitrary files by supplying a .. path segment. Th...
CVE-2010-3203
creationtimestamp| type| source ---|---|--- 2010-08-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14845...
CVE-2009-3203
CVE-2009-3203 affects AJ Auction Pro OOPD 2.x, where the vulnerability is in store.php and is caused by an SQL injection via the id parameter. The issue allows remote attackers to execute arbitrary SQL commands (network attack, low complexity, no authentication) with a base CVSS v2 score of 7.5 (...
CVE-2009-3203
creationtimestamp| type| source ---|---|--- 2009-08-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9447...
CVE-2008-3203
AuraCMS 2.2 (through 2.2.2) is affected by an authentication flaw in js/pages/pages_data.php where no authentication is performed. Remote attackers can modify the id parameter to add, edit, or delete web content. The issue is documented across multiple sources (NVD, CVE listings) and is capable o...
CVE-2008-3203
creationtimestamp| type| source ---|---|--- 2008-07-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6033...
CVE-2006-3203
The CVE-2006-3203 vulnerability affects Ultimate PHP Board (UPB) versions 1.9.6 and earlier, where a default administrator login and password exist. This root cause enables remote attackers to gain privileges (high impact) without authentication. Affected component: UPB installation process inclu...
CVE-2005-3203
The manual installation of Oracle HTML DB HTMLDB 1.3 through 1.3.6 stores the SYS password in install.lst in plaintext, which allows local users to gain privileges...
CVE-2005-3203
The manual installation of Oracle HTML DB HTMLDB 1.3 through 1.3.6 stores the SYS password in install.lst in plaintext, which allows local users to gain privileges...
CVE-2005-3203
The CVE-2005-3203 entry concerns Oracle HTML DB (HTMLDB) versions 1.3 through 1.3.6. The issue, as described, is that the SYS password is stored in plaintext in install.lst during manual installation, which allows local users to gain privileges. This is a local-privilege escalation risk affecting...
Phorum < 5.0.18 register.php XSS
Binary data 3203.prm...