113 matches found
CVE-2010-3487
The provided connected documents confirm CVE-2010-3487 affects YelloSoft Pinky 1.0 for Windows, where a directory traversal flaw allows remote attackers to read arbitrary files via a URL-encoded backslash (%5C). The vulnerability is described consistently across sources (NVD, Red Hat, OpenVAS lis...
CVE-2009-3487
CVE-2009-3487 affects Juniper JUNOS 8.5R1.14 through the J-Web interface, with multiple XSS vectors that allow remote authenticated users to inject arbitrary script/HTML. Affected components/functions include: JEXEC_OUTID in JEXEC_MODE_RELAY_OUTPUT for the jexec program; parameters in scripter.ph...
CVE-2009-3487
creationtimestamp| type| source ---|---|--- 2009-09-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33260 2009-09-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33261...
CVE-2008-3487
PHPAuction GPL Enhanced 2.51 is affected by a SQL injection in profile.php via the id parameter, allowing remote execution of arbitrary SQL commands. The root cause is input unsanitized in the id parameter; CVSSv2 base score 7.5 (HIGH) reflects network access, low attack complexity, no authentica...
CVE-2008-3487
creationtimestamp| type| source ---|---|--- 2008-08-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6182...
CVE-2007-3487
Absolute path traversal in a certain ActiveX control in hpqxml.dll 2.0.0.133 in Hewlett-Packard HP Photo Digital Imaging allows remote attackers to create or overwrite arbitrary files via the argument to the saveXMLAsFile method...
CVE-2007-3487
CVE-2007-3487 describes an absolute path traversal in HP Photo Digital Imaging’s hpqxml.dll (version 2.0.0.133) ActiveX control. The vulnerability allows remote attackers to create or overwrite arbitrary files by supplying bytes to the saveXMLAsFile method. The impact is partial confidentiality a...
CVE-2007-3487
Absolute path traversal in a certain ActiveX control in hpqxml.dll 2.0.0.133 in Hewlett-Packard HP Photo Digital Imaging allows remote attackers to create or overwrite arbitrary files via the argument to the saveXMLAsFile method...
CVE-2006-3487
Summary: CVE-2006-3487 affects VirtuaStore 2.0, where sensitive files are stored under the web root with insufficient access control. This allows remote attackers to obtain local database information by directly accessing the path database/virtuastore.mdb. Impact (as stated): Disclosure of local ...
CVE-2005-3487
Multiple buffer overflows in Scorched 3D 39.1 bf and earlier allow remote attackers to execute arbitrary code via various 1 GLConsole::addLine, 2 ServerCommon::sendString, 3 ServerCommon::serverLog functions, 4 a long command that is not properly handled in ComsMessageHandler.cpp when generating ...
CVE-2005-3487
Multiple buffer overflows in Scorched 3D 39.1 bf and earlier allow remote attackers to execute arbitrary code via various 1 GLConsole::addLine, 2 ServerCommon::sendString, 3 ServerCommon::serverLog functions, 4 a long command that is not properly handled in ComsMessageHandler.cpp when generating ...
CVE-2005-3487
CVE-2005-3487 affects Scorched 3D 39.1 (bf) and earlier. Multiple buffer overflows allow remote attackers to execute arbitrary code via (1) GLConsole::addLine, (2) ServerCommon::sendString, (3) ServerCommon::serverLog, (4) a long command handled poorly in ComsMessageHandler.cpp when generating an...