87 matches found
CVE-2008-4326
The CVE-2008-4326 vulnerability affects phpMyAdmin prior to 2.11.9.2 and arises from the PMA_escapeJsString function in libraries/js_escape.lib.php. When used with Internet Explorer, this allows remote XSS via a NUL byte inside a sequence, bypassing XSS protections. Public references in Debian/O...
CVE-2008-4326
The PMAescapeJsString function in libraries/jsescape.lib.php in phpMyAdmin before 2.11.9.2, when Internet Explorer is used, allows remote attackers to bypass cross-site scripting XSS protection mechanisms and conduct XSS attacks via a NUL byte inside a "/script" sequence...
FreeBSD Ports: phpMyAdmin
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Linux Kernel ULE包处理远程拒绝服务漏洞
Linux kernel是一款开放源代码的操作系统。 Linux kernel的ULE解封装代码存在缺陷，远程攻击者可以利用漏洞对系统进行拒绝服务攻击。 攻击者发送畸形的使用SNDU长度为0的ULEUnidirectional Lightweight Encapsulation RFC 4326包，可导致机器停止响应，造成拒绝服务攻击。 Linux kernel 2.6.17 .8 可采用如下补丁： --- diff -uprN linux-2.6.17.8/drivers/media/dvb/dvb-core/dvbnet.c...
CVE-2006-4326
CVE-2006-4326 : A stack-based buffer overflow in Justsystem Ichitaro versions 9.x–13.x, Ichitaro 2004–2006, Ichitaro for Linux, Government 2006, and FormLiner before 20060818 allows remote attackers to execute arbitrary code via long Unicode strings in a crafted document. This vulnerability has b...
CVE-2005-4326
The CVE-2005-4326 entry concerns APC PowerChute Network Shutdown’s web interface, where all communication is performed in cleartext (base64-encoded). This design allows remote attackers to sniff authentication credentials. Public references confirm the issue and the metric suggests a network-base...
