CVE-2010-3489

Cross-site scripting XSS vulnerability in netautor/napro4/home/login2.php in CMS Digital Workroom formerly Netautor Professional 5.5.0 allows remote attackers to inject arbitrary web script or HTML via the goback parameter...

CVE-2010-3489

creationtimestamp| type| source ---|---|--- 2010-09-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34649...

CVE-2009-3489

Adobe Photoshop Elements 8.0 installs the Adobe Active File Monitor V8 service with an insecure security descriptor, which allows local users to 1 stop the service via the stop command, 2 execute arbitrary commands as SYSTEM by using the config command to modify the binPath variable, or 3 restart...

CVE-2009-3489

Adobe Photoshop Elements 8.0 installs the Adobe Active File Monitor V8 service with an insecure security descriptor. This allows local users to (1) stop the service via stop, (2) execute arbitrary commands as SYSTEM by using the config command to modify the binPath, or (3) restart the service via...

CVE-2008-3489

CVE-2008-3489 is an SQL injection vulnerability affecting PHPX 3.5.16, specifically in the checkCookie function within includes/functions.inc.php. The underlying issue enables remote attackers to inject and execute arbitrary SQL commands through a PXL cookie. Public sources in the connected docum...

CVE-2008-3489

creationtimestamp| type| source ---|---|--- 2008-07-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6176...

CVE-2007-3489

CVE-2007-3489 affects Check Point VPN-1 Edge X Embedded NGX 7.0.33x with CSRF in the management interface (pop/WizU.html). A remote attacker can perform privileged actions as administrators, demonstrated by a request using swuuser and swupass parameters to add an administrator account. The vulner...

CVE-2007-3489

Cross-site request forgery CSRF vulnerability in pop/WizU.html in the management interface in Check Point VPN-1 Edge X Embedded NGX 7.0.33x on the Check Point VPN-1 UTM Edge allows remote attackers to perform privileged actions as administrators, as demonstrated by a request with the swuuser and...

VPN-1 UTM Edge cross-site request forgery vulnerability (CVE-2007-3489)

...

CVE-2006-3489

F-Secure Anti-Virus 2003 through 2006 and other versions, Internet Security 2003 through 2006, and Service Platform for Service Providers 6.x and earlier allows remote attackers to bypass anti-virus scanning via a crafted filename...

CVE-2006-3489

F-Secure Anti-Virus 2003 through 2006 and other versions, Internet Security 2003 through 2006, and Service Platform for Service Providers 6.x and earlier allows remote attackers to bypass anti-virus scanning via a crafted filename...

GreyMatter gm-upload.cgi Arbitrary File Upload

Binary data 3489.prm...

CVE-2005-3489

CVE-2005-3489 : Buffer overflow in Asus Video Security 3.5.0.0 and earlier when using authorization allows remote attackers to execute arbitrary code via a long username/password string. The issue is triggered through crafted login data over the network (no authentication interaction required). A...