85 matches found
CVE-2007-4377
Stack-based buffer overflow in the IMAP service in SurgeMail 38k allows remote authenticated users to execute arbitrary code via a long argument to the SEARCH command. NOTE: this might overlap CVE-2007-4372...
CVE-2006-4377
CVE-2006-4377 describes multiple SQL injection vulnerabilities in the Guder und Koch Netzwerktechnik Eichhorn Portal. The flaws permit remote attackers to execute arbitrary SQL commands through unspecified vectors, potentially including parameters such as profil_nr, sprache, suchstring, GaleryKey...
CVE-2005-4377
Cross-site scripting XSS vulnerability in Page.asp in Baseline CMS 1.95 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 PageID and 2 SiteNodeID parameters...
CVE-2005-4377
CVE-2005-4377 describes a cross-site scripting (XSS) vulnerability in the Page.asp component of Baseline CMS (version 1.95 and earlier). The vulnerability allows remote attackers to inject arbitrary web script or HTML via the PageID or SiteNodeID parameters. The available records indicate an XSS ...