89 matches found
CVE-2012-3309
Cross-site request forgery CSRF vulnerability in the account-creation panel in IBM InfoSphere Guardium 8.2 and earlier, when the CSRF filtering aka csrfstatus feature is disabled, allows remote attackers to hijack the authentication of administrators for requests that create administrative accoun...
CVE-2011-3309
CVE-2011-3309 affects Cisco ASA 5500 series devices running software 8.2 through 8.4, where the device processes IKE requests even when vpnclient mode is configured. The root cause is the acceptance and handling of IKE traffic that can be observed by reading responder traffic, enabling potential ...
CVE-2009-3309
creationtimestamp| type| source ---|---|--- 2009-09-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9710...
CVE-2008-3309
CVE-2008-3309 is a SQL injection vulnerability in DigiLeave 1.2 and earlier, exposed via info_book.asp where the book_id parameter is used. The issue allows remote attackers to execute arbitrary SQL commands. The affected component is info_book.asp within DigiLeave, with the root cause being unsa...
CVE-2008-3309
creationtimestamp| type| source ---|---|--- 2008-07-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6104...
CVE-2007-3309
The CVE-2007-3309 entry concerns Simple Machines Forum (SMF) 1.1.2, where a vulnerability enables remote attackers to execute arbitrary PHP code during (1) message creation or (2) message editing. The available sources identify the affected software/version and the code-execution risk but do not ...
CVE-2006-3309
CVE-2006-3309 concerns a SQL injection in the Scout Portal Toolkit (SPT) via the SPT--ForumTopics.php script’s forumid parameter. Affected product/version: Scout Portal Toolkit (SPT) ≤ 1.4.0. Root cause: insufficient input sanitization leading to SQL-related command execution. Impact: potential d...
