108 matches found
CVE-2010-3430
The privilege-dropping implementation in the 1 pamenv and 2 pammail modules in Linux-PAM aka pam 1.1.2 does not perform the required setfsgid and setgroups system calls, which might allow local users to obtain sensitive information by leveraging unintended group permissions, as demonstrated by a...
CVE-2009-3430
The CVE-2009-3430 entry concerns Allomani Mobile 2.5, where a SQL injection flaw in login.php allows remote attackers to manipulate the database by supplying crafted input in the username field during login. The vulnerability is caused by unsafely handling user input in the login action, enabling...
CVE-2009-3430
creationtimestamp| type| source ---|---|--- 2009-07-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9273...
Fedora Core 9 FEDORA-2009-3430 (argyllcms)
The remote host is missing an update to argyllcms announced via advisory FEDORA-2009-3430. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...
CVE-2008-3430
The CVE affects the CoVideoWindow.ocx ActiveX control (version 5.0.907.1) in Eyeball MessengerSDK, used by products such as SiOL Komunikator 1.3. The vulnerability is a buffer overflow triggered by a large argument to the BGColor method, allowing remote code execution. This payload could be reach...
CVE-2007-3430
CVE-2007-3430 describes an SQL injection vulnerability in index.php of Simple Invoices 2007 (dated 2007-05-25). The vulnerability allows remote attackers to execute arbitrary SQL commands via the submit parameter used in an email action. The available references indicate a remote, unauthenticated...
CVE-2006-3430
CVE-2006-3430 affects PatchLink Update Server (PLUS) prior to 6.1 P1 and 6.2.x prior to 6.2 SR1 P1, and Novell ZENworks 6.2 SR1 and earlier. The vulnerability is an SQL injection in checkprofile.asp via the agentid parameter (and related path /dagent/checkprofile.php) that allows an unauthenticat...