CVE-2008-3422

CVE-2008-3422 is a known XSS vulnerability in the ASP.NET class libraries of Mono 2.0 and earlier, exploitable via crafted attributes in HtmlControl, HtmlForm, HtmlInputButton, HtmlInputRadioButton, and HtmlSelect. Connected notes from SUSE/Mandriva advisories reiterate this issue (alongside CVE-...

CVE-2007-3422

WebAPP (web-app.org) before 0.9.9.7 is affected by CVE-2007-3422. The getcgi function in cgi-bin/cgi-lib/subs.pl parses query strings containing (1) non‑printing characters, (2) certain printing characters not common in URLs, or (3) invalid URL encoding sequences. Impact is stated as unknown with...

CVE-2006-3422

CVE-2006-3422 describes a PHP remote file inclusion vulnerability in WonderEdit Pro CMS . An attacker can trigger arbitrary PHP code execution by supplying a crafted value to the config[template_path] parameter in user_bottom.php , affecting multiple templates (rwb, gwb, blues, bluwhi, grns). The...

CVE-2006-3422

PHP remote file inclusion vulnerability in WonderEdit Pro CMS allows remote attackers to execute arbitrary PHP code via the configtemplatepath parameter in userbottom.php, as used by multiple templates including 1 rwb template/rwb/userbottom.php, 2 gwb template/rwb/userbottom.php, 3 blues, 4...

CVE-2005-3422

The CVE-2005-3422 entry describes a Cross-site Scripting (XSS) vulnerability in ASP Fast Forum’s error.asp, exploitable by remote attackers via the error parameter to inject arbitrary scripts/HTML. The NVD entry lists a CVSS v2 base score of 4.3 (Medium), with attack vector Network, authenticatio...