107 matches found
CVE-2009-3595
CVE-2009-3595: SQL injection in VS PANEL 7.5.5 via Cat_ID in results.php allows remote execution of arbitrary SQL commands. Affected product: VS PANEL (version 7.5.5 noted in the description); vector: HTTP parameter Cat_ID; root cause: improper input handling leading to injection. Connected recor...
CVE-2008-3595
txtSQL 2.2 Final is affected by a PHP remote file inclusion in examples/txtSQLAdmin/startup.php. The vulnerability allows an attacker to supply a URL for CFG[txtsql][class], enabling execution of arbitrary PHP code. This CVE (CVE-2008-3595) is rated HIGH (CVSS 2.0 base score 9.3) by NVD. The conn...
CVE-2008-3595
creationtimestamp| type| source ---|---|--- 2008-08-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6224...
CVE-2007-3595
CVE-2007-3595 is a duplicate of CVE-2007-3399 and has been withdrawn; the active entry to reference is CVE-2007-3399, which describes an SQL injection vulnerability in Power Phlogger (PPhlogger) 2.2.5 and earlier allowing remote execution of arbitrary SQL commands via the username parameter in lo...
CVE-2006-3595
The CVE refers to Cisco Router Web Setup (CRWS) with the IOS HTTP server, affected in versions prior to 3.3.0 build 31. The issue is that the default configuration does not require credentials, allowing remote attackers to access the server with arbitrary privilege levels (bug CSCsa78190). Connec...
CVE-2005-3595
CVE-2005-3595 concerns Windows XP Home Edition, where the default installation includes a blank Administrator password. This enables remote attackers to gain control of the machine without authentication, as described in the CVE records. The related connected documents corroborate that the vulner...