CVE-2012-3240

The CVE affects Eucalyptus Walrus: versions 2.0.3 and 3.0.x prior to 3.0.2. Root cause is a flaw in WalrusComponentLoginModule.authenticate where the REST request is processed with admin context without proper trust verification, enabling a remote, unauthenticated attacker to gain administrator p...

VUPEN Security Research - Microsoft Office Excel RealTimeData Array Indexing Vulnerability (CVE-2010-3240)

VUPEN Security Research - Microsoft Office Excel RealTimeData Array Indexing Vulnerability CVE-2010-3240 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- Microsoft Office Excel is a powerful tool you can use to create and format spreadsheets, and analyze and share...

CVE-2010-3240

CVE-2010-3240 describes a remote code execution vulnerability in Microsoft Office Excel and related components (Excel 2002 SP3, Excel 2007 SP2, Excel Viewer SP2, and Office Compatibility Pack SP2) caused by an error in parsing Real Time Data Array records. An attacker could exploit this by convin...

CVE-2009-3240

CVE-2009-3240 is a documented XSS vulnerability in the Happy Linux XF-Section module for XOOPS, version 1.12a. The reports consistently describe an ability for remote attackers to inject arbitrary web script or HTML via unspecified vectors, potentially allowing arbitrary script execution in a use...

CVE-2008-3240

CVE-2008-3240 is a SQL injection vulnerability in the AlstraSoft Affiliate Network Pro, specifically in the directory action implemented by index.php. The vulnerability allows remote attackers to execute arbitrary SQL commands by manipulating the pgm parameter. Root cause: improper input handling...

CVE-2008-3240

creationtimestamp| type| source ---|---|--- 2008-07-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6087...

CVE-2007-3240

The CVE-2007-3240 entry concerns the WordPress Vistered-Little theme vulnerable in 404.php: XSS via the REQUEST_URI that accesses index.php, potentially allowing remote injection of script/HTML and, per notes, execution in an administrative session. The issue is actionable in the theme code and i...

CVE-2007-3226

Cross-site scripting XSS vulnerability in dotProject before 2.1 RC2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2006-2851 and CVE-2006-3240...

Cross site scripting

Cross-site scripting XSS vulnerability in dotProject before 2.1 RC2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2006-2851 and CVE-2006-3240...

CVE-2006-3240

Cross-site scripting XSS vulnerability in classes/ui.class.php in dotProject 2.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the login parameter...

CVE-2006-3240

CVE-2006-3240 is an XSS vulnerability in dotProject prior to 2.0.4 (2.0.3 and earlier) affecting the login flow via the login parameter in classes/ui.class.php. The underlying issue is a cross-site scripting exposure that could allow remote attackers to inject arbitrary script/HTML into a user’s ...

CVE-2005-3240

CVE-2005-3240 is described as a race condition in Microsoft Internet Explorer where a user-assisted drag-and-drop action could overwrite files or possibly execute code. The connected CVE-3840 records indicate this SQL injection entry is a duplicate/typo and that the correct identifier is CVE-2005...

Maxthon Web Browser < 1.3.3 Cross-Domain Dialog Box Spoofing

Binary data 3240.prm...

CVE-2011-3240

CVE-2011-3240 is rejected/not used; this CVE entry does not represent an active vulnerability.