68 matches found
CVE-2009-3254
creationtimestamp| type| source ---|---|--- 2009-08-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9548...
CVE-2008-3254
CVE-2008-3254 describes a SQL injection in index.php of preCMS 1, where the attacker can supply a crafted id parameter in the UserProfil action to execute arbitrary SQL commands. The vulnerability arises in the web interface and is exploitable remotely with network access; no authentication is in...
CVE-2007-3254
CVE-2007-3254 covers multiple stored and reflected XSS vulnerabilities in Xythos Enterprise Document Manager (XEDM) versions prior to 5.0.25.8 and 6.x prior to 6.0.46.1. The issues enable remote authenticated users to inject arbitrary HTML/JavaScript via (1) a saved Workflow name; (2) a Workflow ...
CVE-2006-3254
SQL injection vulnerability in newthread.php in Woltlab Burning Board WBB 2.0 RC2 allows remote attackers to execute arbitrary SQL commands via the boardid parameter...
CVE-2006-3254
Woltlab Burning Board (WBB) 2.0 RC2 contains a SQL injection in newthread.php that allows remote attackers to execute arbitrary SQL commands via the boardid parameter. The vulnerability is described in CVE-2006-3254; original sources confirm the affected component and impact, but do not provide a...
CVE-2005-3254
The CGIwrap program before 3.9 on Debian GNU/Linux uses an incorrect minimum value of 100 for a UID to determine whether it can perform a seteuid operation, which could allow attackers to execute code as other system UIDs that are greater than the minimum value, which should be 1000 on Debian...
CVE-2005-3254
The CVE-2005-3254 issue affects CGIwrap prior to 3.9 on Debian GNU/Linux, where the minimum UID checked for seteuid operations is incorrectly set to 100 instead of 1000. This mismatch can allow an attacker to execute code as other system UIDs greater than the minimum value, as described in multip...
