CVE-2008-3567

CVE-2008-3567 affects Winamp before 5.541: cross-zone scripting via the NowPlaying feature allows XSS through an MP3 file with JavaScript in id3 tags. Vulnerable component is Winamp’s NowPlaying metadata handling; root cause is unsanitized id3 tag content rendered by the embedded browser. Observe...

CVE-2008-3567

Cross-zone scripting vulnerability in the NowPlaying functionality in NullSoft Winamp before 5.541 allows remote attackers to conduct cross-site scripting XSS attacks via an MP3 file with JavaScript in id3 tags...

CVE-2007-3567

CVE-2007-3567 affects MySQLDumper 1.21b through 1.23 REV227. The vulnerability stems from a flawed “Limit GET” statement in the .htaccess authentication mechanism, allowing remote attackers to bypass authentication via HTTP POST requests. Impact is partial confidentiality and integrity and partia...

CVE-2006-3567

Cross-site scripting XSS vulnerability in the web administration interface logging feature in Juniper Networks Redline DX 5.1.x, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via the username login field...

CVE-2006-3567

CVE-2006-3567 describes an XSS vulnerability in the web administration interface logging feature of Juniper Networks (Redline) DX 5.1.x (and possibly earlier). The issue allows remote attackers to inject arbitrary web script or HTML via the username login field. Affected component is the web admi...

CVE-2005-3898

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-3567. Reason: This candidate is a reservation duplicate of CVE-2005-3567. Notes: All CVE users should reference CVE-2005-3567 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2005-3567

slapd daemon in IBM Tivoli Directory Server ITDS 5.2.0 and 6.0.0 binds using SASL EXTERNAL, which allows attackers to bypass authentication and modify and delete directory data via unknown attack vectors...

CVE-2005-3567

The CVE-2005-3567 entry concerns the slapd daemon in IBM Tivoli Directory Server (ITDS) versions 5.2.0 and 6.0.0. It describes a vulnerability where binds using SASL EXTERNAL can bypass authentication, enabling an attacker to modify and delete directory data via unspecified attack vectors. The co...