CVE-2008-4364

SQL injection vulnerability in default.aspx in ParsaGostar ParsaWeb CMS allows remote attackers to execute arbitrary SQL commands via the 1 id parameter in the "page" page and 2 txtSearch parameter in the "Search" page...

Unfixed XSS vulnerability at dxgusa.helpserve.com

Security researcher BackDoor, has submitted on 13/09/2007 a cross-site-scripting XSS vulnerability affecting dxgusa.helpserve.com, which at the time of submission ranked 4364 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/09/2007. It is...

CVE-2007-4364

Fedora Commons before 2.2.1 does not properly handle certain authentication requests involving Java Naming and Directory Interface JNDI, related to 1 a nonexistent account name in combination with an empty password, which allows remote attackers to trigger a certain "unexpected / strange response...

CVE-2007-4364

CVE-2007-4364 affects Fedora Commons prior to 2.2.1. The issue arises in how the application handles certain authentication requests via JNDI, with two described scenarios: (1) a nonexistent account name combined with an empty password can trigger an abnormal LDAP server response, (2) a reauthent...

CVE-2006-4364

CVE-2006-4364 affects Alt-N Technologies’ MDaemon POP3 server prior to version 9.0.6. The vulnerability is due to multiple heap-based buffer overflows triggered by long strings containing '@' characters in the USER and APOP commands. Exploitation can cause a daemon crash (DoS) and may allow remot...

CVE-2005-4364

The CVE-2005-4364 entry describes a Cross-site scripting (XSS) vulnerability in the Hot Banana Web Content Management Suite 5.3, specifically in index.cfm where the keywords parameter can be exploited to inject arbitrary web script or HTML. The accompanying data indicates an impact on confidentia...