72 matches found
CVE-2010-4284
SQL injection vulnerability in the authentication form in the integrated web server in the Data Management Server DMS before 1.4.3 in Samsung Integrated Management System allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2010-4284
SQL injection vulnerability in the authentication form in the integrated web server in the Data Management Server DMS before 1.4.3 in Samsung Integrated Management System allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2010-4284
Samsung Data Management Server (DMS) before 1.4.3 uses an integrated web server with an authentication form vulnerable to SQL injection, enabling remote attackers to bypass authentication and gain administrative access via unspecified vectors. Affected versions include 1.3.3, 1.4.1, and 1.4.2; Sa...
CVE-2008-4284
Open redirect vulnerability (CVE-2008-4284) in IBM WebSphere Application Server via the ibm_security_logout servlet. Affected versions: WAS 5.1.1.19 and earlier 5.x, 6.0.x before 6.0.2.33, and 6.1.x before 6.1.0.23. Impact: remote attackers can redirect users to arbitrary sites and conduct phishi...
SuSE 10 Security Update : gnome-screensave (ZYPP Patch Number 4284)
Memory corruption made the gnome-screensaver process crash when the screen was locked, leaving the desktop accessible to anyone without having to enter a password. This fixes this memory corruption, as confirmed by internal testing. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text...
Mac OS X < 10.4.11 Multiple Vulnerabilities (Security Update 2007-008)
Binary data 4284.prm...
CVE-2007-4284
CVE-2007-4284 affects Cisco Unified MeetingPlace Web Conferencing (MP)
CVE-2006-4284
CVE-2006-4284 concerns an SQL injection in comments.asp of LBlog 1.05 and earlier, allowing remote attackers to execute arbitrary SQL commands through the id parameter. The vulnerability is documented in the NVD entry and corroborated by CVE references; CVSS v2 base score is 7.5 (High) with netwo...
CVE-2005-4284
Cross-site scripting XSS vulnerability in StaticStore Search Engine 1.189A and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters to search.cgi, possibly the keywords parameter. NOTE: this issue was originally disputed by the vendor, but it has since...
CVE-2005-4284
CVE-2005-4284 describes a cross-site scripting (XSS) vulnerability in the StaticStore Search Engine up to version 1.189A. The flaw allows remote attackers to inject arbitrary script or HTML via parameters to search.cgi, possibly the keywords parameter, leading to user script execution in the cont...
