CVE-2014-3312

Cisco Small Business SPA300 and SPA500 Series IP Phones are affected by CVE-2014-3312 due to an insufficiently authenticated debug console interface. The vulnerability allows a local attacker to execute arbitrary commands on the debug shell and read/modify data in memory or on the filesystem via ...

CVE-2012-3312

The CVE-2012-3312 issue affects IBM InfoSphere Guardium 8.2 and earlier, where the datasource definition editor transmits passwords in clear text when the save-password setting is enabled, enabling remote attackers to obtain database credentials by sniffing the network. The IBM Security Bulletin ...

SuSE 11.1 Security Update : epiphany (SAT Patch Number 3611)

epiphany does not support verification of ssl certificates. It nevertheless displayed all https connections as secure. CVE-2010-3312 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text...

CVE-2010-3312

Epiphany 2.28 and 2.29, when WebKit and LibSoup are used, unconditionally displays a closed-lock icon for any URL beginning with the https: substring, without any warning to the user, which allows man-in-the-middle attackers to spoof arbitrary https web sites via a crafted X.509 server certificat...

Open redirect

Midori before 0.2.5, when WebKitGTK+ before 1.1.14 or LibSoup before 2.29.91 is used, does not verify X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary https web sites via a crafted server certificate, a related issue to CVE-2010-3312...

CVE-2010-3312

CVE-2010-3312 affects Epiphany (2.28/2.29) when using WebKit and LibSoup, where the UI unconditionally shows a closed-lock icon for any https URL, potentially enabling MITM via a crafted X.509 certificate. Related advisories mention Midori pre-0.2.5 and OpenSUSE/openSUSE libwebkit/WebKitGTK+ vers...

CVE-2009-3312

PHP remote file inclusion vulnerability in php/init.poll.php in phpPollScript 1.3 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a crafted URL in the includeclass parameter...

CVE-2009-3312

The CVE-2009-3312 entry describes a PHP remote file inclusion vulnerability in phpPollScript 1.3 and earlier. Root cause: when PHP register_globals is enabled, an attacker can craft a URL targeting the include_class parameter to cause php/init.poll.php to include a remote/local file, enabling arb...

CVE-2009-3312

creationtimestamp| type| source ---|---|--- 2009-09-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9703...

CVE-2008-3312

The CVE-2008-3312 entry describes a directory traversal vulnerability in Lemon CMS 1.10, specifically in lemon_includes/FCKeditor/editor/filemanager/browser/browser.php. An attacker can abuse the .. (dot dot) traversal in the dir parameter to include and execute arbitrary local files. This inform...

CVE-2006-3312

The CVE-2006-3312 entry documents multiple XSS vulnerabilities in QaTraq 6.5 RC and earlier, exploitable via numerous parameters across several PHP files (e.g., top.inc, queries_view_search.php, components_.php, design_ .php, phase_.php, download.php, login.php, products_ .php). The root cause is...

CVE-2005-3975

Interpretation conflict in file.inc in Drupal 4.5.0 through 4.5.5 and 4.6.0 through 4.6.3 allows remote authenticated users to inject arbitrary web script or HTML via HTML in a file with a GIF or JPEG file extension, which causes the HTML to be executed by a victim who views the file in Internet...