CVE-2010-3485

SQL injection vulnerability in common.php in LightNEasy 3.2.1 allows remote attackers to execute arbitrary SQL commands via the userhandle cookie to LightNEasy.php, a different vector than CVE-2008-6593. NOTE: the provenance of this information is unknown; the details are obtained solely from thi...

CVE-2010-3485

creationtimestamp| type| source ---|---|--- 2010-09-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15060...

CVE-2009-3485

CVE-2009-3485 is a cross-site scripting (XSS) vulnerability in the J-Web interface of Juniper JUNOS 8.5R1.14 and 9.0R1.1. The issue allows remote attackers to inject arbitrary web script or HTML via PATH_INFO to the default URI. Affected component: J-Web (Junos OS). Root cause: insufficient input...

CVE-2008-3485

Technical details about CVE-2008-3485 are not publicly available in the provided documents. Monitor for updates from CVE/NVD entries or vendor advisories.

CVE-2007-3485

CVE-2007-3485 involves multiple XSS vulnerabilities in Yandex.Server. Public records in the provided documents show that remote attackers could inject arbitrary web script or HTML via the (1) query parameter or (2) within parameter to the default URI. The NVD entry lists a MEDIUM-severity vector ...

CVE-2007-3485

Multiple cross-site scripting XSS vulnerabilities in Yandex.Server allow remote attackers to inject arbitrary web script or HTML via the 1 query or 2 within parameter to the default URI...

CVE-2006-3485

CVE-2006-3485 affects AstroDog Press Some Chess 1.5-RC2 and earlier. The vulnerability is a SQL injection in unspecified vectors, with potential involvement of the gameID parameter in board.php, allowing remote attackers to execute arbitrary SQL commands. Documents do not specify concrete exploit...

CVE-2005-3485

CVE-2005-3485 describes a buffer overflow in Glider Collect’n kill 1.0.0.0 that allows remote attackers to execute arbitrary code via a long gl_playerEnter command (player name). The description across the NVD/CVE records confirms the vulnerability is triggered by an excessively long player name ...