165 matches found
VMSA-2006-0004 Cross site scripting vulnerability and other fixes
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------- VMware Security Advisory Advisory ID: VMSA-2006-0004 Synopsis: Cross site scripting vulnerability and other fixes Knowledge base URL:http://kb.vmware.com/kb/2118366 Issue date:...
CVE-2005-3618
CVE-2005-3618 describes a CSRF vulnerability in VMware ESX Server’s Management Interface that can let an attacker modify a known user’s password via a crafted URL. Affected products/versions include ESX Server 2.0.x prior to 2.0.2 patch 1, 2.1.x prior to 2.1.3 patch 1, and 2.x prior to 2.5.3 patc...
CVE-2006-3618
CVE-2006-3618 affects Pixelated By Lev (PBL) Guestbook, versions 1.32 and earlier, via SQL injection in pblguestbook.php. The vulnerability allows remote attackers to execute arbitrary SQL commands through the (1) name, (2) email, (3) website, (4) comments, (5) rate, and (6) private parameters. T...
CVE-2005-3618
Cross-site request forgery CSRF vulnerability in the management interface for VMware ESX Server 2.0.x before 2.0.2 patch 1, 2.1.x before 2.1.3 patch 1, and 2.x before 2.5.3 patch 2 allows allows remote attackers to perform unauthorized actions as the administrator via URLs, as demonstrated using...