CVE-2008-3262

Claroline web application vulnerable to CSRF in versions before 1.8.10. The issue allows remote attackers to change user passwords without requiring the previous password, indicating a lack of authentication requirements for sensitive actions. Affected software: Claroline (before 1.8.10). Root ca...

CVE-2008-3262

Cross-site request forgery CSRF vulnerability in Claroline before 1.8.10 allows remote attackers to change passwords, related to lack of a requirement for the previous password...

CVE-2007-3262

IBM WebSphere Application Server 6.1 (and earlier) contains a vulnerability in the Default Messaging Component that can allow remote denial of service via a thread hang, potentially tied to a TCP issue, or to MPAlarmThread causing a memory leak. The affected product/version range is WAS 6.1.0.7 a...

CVE-2006-3262

The CVE-2006-3262 entry describes an SQL injection in the Weblinks module (weblinks.php) of Mambo 4.6rc1 and earlier. The vulnerability allows remote attackers to execute arbitrary SQL commands via the title parameter. Affected: Mambo 4.6rc1 and earlier (Weblinks component). Root cause: lack of i...

CVE-2005-3262

CVE-2005-3262 relates to a format string vulnerability in WinRAR (RARLAB) versions 2.90 through 3.50. The issue arises when WinRAR displays diagnostic errors for an invalid filename, where format string specifiers in a UUE/XXE file are not properly handled, allowing remote attackers to execute ar...

CVE-2005-3262

Format string vulnerability in RARLAB WinRAR 2.90 through 3.50 allows remote attackers to execute arbitrary code via format string specifiers in a UUE/XXE file, which are not properly handled when WinRAR displays diagnostic errors related to an invalid filename...