CVE-2011-3991

CVE-2011-3991 describes an untrusted search path vulnerability in FFFTP for version 1.98a and earlier . Local users could potentially execute arbitrary code due to how the application loads executables from a directory, with the NVD listing a high impact (base score 9.3) and no required user inte...

[security bulletin] HPSBMA02601 SSRT100316 rev.1 - HP Insight Control Server Migration for Windows, Remote Cross Site Scripting (XSS), Privilege Escalation, Unauthorized Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02563279 Version: 1 HPSBMA02601 SSRT100316 rev.1 - HP Insight Control Server Migration for Windows, Remote Cross Site Scripting XSS, Privilege Escalation, Unauthorized Access NOTICE: The...

CVE-2010-3991

CVE-2010-3991 concerns HP Insight Control Server Migration for Windows prior to v6.2. The vulnerability is a remote cross-site scripting (XSS) flaw in the product’s web interface, allowing an attacker to inject arbitrary web script or HTML via unspecified vectors. The affected component is HP Ins...

CVE-2008-3991

The CVE-2008-3991 entry concerns an unspecified vulnerability in the Oracle OLAP component of Oracle Database versions 9.2.08, 9.2.0.8DV, and 10.1.0.5, related to OLAPSYS.CWM2_OLAP_AW_AWUTIL. The impact stated is availability via remote authenticated access. The provided documents do not include ...

CVE-2007-3991

The CVE-2007-3991 entry concerns multiple cross-site scripting (XSS) vulnerabilities in cv.asp of Asp cvmatik 1.1 and earlier. The issues allow remote attackers to inject arbitrary web script or HTML via the parameters Adiniz (Ady), Soyadiniz (Soyady), Ehliyet, Askerlik, and GSM, among potentiall...

BitTorrent Server Detection

Binary data 3991.prm...

CVE-2006-3991

CVE-2006-3991 is a PHP remote file inclusion vulnerability affecting Vlad Vostrykh Voodoo chat 1.0RC1b and earlier, allowing a remote attacker to execute arbitrary PHP code via the file_path parameter in index.php. The root cause is unvalidated user input in the file_path parameter leading to rem...

CVE-2005-3991

Multiple cross-site scripting XSS vulnerabilities in phpMyChat 0.14.6 allow remote attackers to inject arbitrary web script or HTML via the medium parameter to 1 startpage.css.php and 2 style.css.php; or the From parameter to userspopupL.php...

CVE-2005-3991

PHPMyChat 0.14.6 is affected by multiple XSS vulnerabilities. Attackers can inject arbitrary script/HTML via the medium parameter to start_page.css.php and style.css.php, or the From parameter to users_popupL.php. The root cause is lack of input sanitization in these parameters. Impact is remote ...