63 matches found
CVE-2008-3402
creationtimestamp| type| source ---|---|--- 2008-07-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6162...
CVE-2006-3402
CVE-2006-3402 describes a SQL injection vulnerability in VirtuaStore 2.0 that allows remote attackers to execute arbitrary SQL commands via the password parameter during login. The issue affects VirtuaStore 2.0 and is caused by improper handling of input in the login flow, enabling an attacker to...
CVE-2005-3402
CVE-2005-3402 affects Mozilla Thunderbird SMTP client (notably 1.0.5 BETA and 1.0.7). The issue is that Thunderbird does not notify users when it cannot establish a secure channel with the SMTP server, enabling a MITM to obtain authentication information by bypassing TLS or downgrading CRAM-MD5 t...