CVE-2008-4364

CVE-2008-4364 describes a SQL injection in ParsaGostar ParsaWeb CMS. The vulnerability affects the default.aspx page, allowing remote attackers to execute arbitrary SQL via the id parameter on the “page” page and the txtSearch parameter on the “Search” page. The associated connected documents con...

Unfixed XSS vulnerability at dxgusa.helpserve.com

Security researcher BackDoor, has submitted on 13/09/2007 a cross-site-scripting XSS vulnerability affecting dxgusa.helpserve.com, which at the time of submission ranked 4364 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/09/2007. It is...

CVE-2007-4364

Fedora Commons before 2.2.1 does not properly handle certain authentication requests involving Java Naming and Directory Interface JNDI, related to 1 a nonexistent account name in combination with an empty password, which allows remote attackers to trigger a certain "unexpected / strange response...

CVE-2007-4364

CVE-2007-4364 affects Fedora Commons prior to 2.2.1. The issue arises in how the application handles certain authentication requests via JNDI, with two described scenarios: (1) a nonexistent account name combined with an empty password can trigger an abnormal LDAP server response, (2) a reauthent...

CVE-2006-4364

CVE-2006-4364 affects Alt-N Technologies’ MDaemon POP3 server prior to version 9.0.6. The vulnerability is due to multiple heap-based buffer overflows triggered by long strings containing '@' characters in the USER and APOP commands. Exploitation can cause a daemon crash (DoS) and may allow remot...

CVE-2005-4364

The CVE-2005-4364 entry describes a Cross-site scripting (XSS) vulnerability in the Hot Banana Web Content Management Suite 5.3, specifically in index.cfm where the keywords parameter can be exploited to inject arbitrary web script or HTML. The accompanying data indicates an impact on confidentia...