71 matches found
CVE-2010-4354
The CVE covers a vulnerability in Cisco VPN products where remote attackers could enumerate valid VPN group names by sending an IKE Aggressive Mode packet with the group name in the ID field. Affected devices include ASA 5500 series, PIX 500 series, and VPN Concentrators 3000 series. Root cause i...
CVE-2009-4354
TransWARE Active! mail 2003 (Build 2003.0139.0871 and earlier) contains a session cookie handling flaw that can allow remote attackers to hijack web sessions via insecure cookie handling in SSL contexts. Affects the web-based mail software and enables user impersonation. According to JVN/NVD reco...
CVE-2008-4354
SQL injection vulnerability in the products module in NetArt Media iBoutique 4.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter to index.php...
CVE-2008-4354
The CVE-2008-4354 entry describes an SQL injection in the NetArt Media iBoutique 4.0 products module, exploitable via the cat parameter to index.php. Affected component: products module; vulnerable input handling allows arbitrary SQL execution. Root cause: improper input validation for the cat pa...
CVE-2008-4354
creationtimestamp| type| source ---|---|--- 2008-09-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6444...
Tivoli Provisioning Manager < 5.1.0.3 DoS
Binary data 4354.prm...
CVE-2007-4354
CVE-2007-4354 concerns a buffer overflow in the AIX component bos.perf.tools (fileplace) on IBM AIX 5.2 and 5.3. The vulnerability permits local privilege escalation via unspecified vectors. Public data identifies affected products as AIX 5.2/5.3 with the bos.perf.tools package, and notes that ex...
CVE-2006-4354
Phome Empire CMS 3.7 and earlier are affected by CVE-2006-4354, a PHP remote file inclusion in e/class/CheckLevel.php. The vulnerability allows a remote attacker to execute arbitrary PHP code via the check_path parameter. The provided documents confirm vulnerable software version and the vulnerab...
CVE-2005-4354
Cross-site scripting XSS vulnerability in webglimpse.cgi in Webglimpse 2.14.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the query parameter...
CVE-2005-4354
CVE-2005-4354 is a documented XSS vulnerability in Webglimpse 2.14.1 and earlier, exploitable via the query parameter on webglimpse.cgi. The connected documents do not provide explicit exploit details, affected versions beyond the stated range, or concrete remediation steps. The NVD entry notes a...
