146 matches found
CVE-2009-4540
creationtimestamp| type| source ---|---|--- 2009-08-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9406...
CVE-2008-4540
This CVE concerns Windows Mobile 6 on the HTC Hermes, where WLAN passwords are exposed to the auto-completion mechanism of the password field. The root cause is that the password input handling allows nearby attackers to retrieve credentials, enabling bypass of WLAN authentication and potential u...
CVE-2007-4540
CVE-2007-4540 affects Olate Download (od) 3.4.2, specifically the download.php module. The vulnerability comprises multiple SQL injection flaws that can be triggered by crafted HTTP headers (HTTP_REFERER or HTTP_USER_AGENT), allowing remote attackers to execute arbitrary SQL commands. The connect...
CVE-2006-4540
The CVE-2006-4540 entry describes a Cross-site Scripting (XSS) vulnerability in Learn.com LearnCenter, specifically in learncenter.asp, where an attacker can inject arbitrary web script or HTML through the id parameter. According to the NVD record, the vulnerability can be exploited remotely over...