109 matches found
CVE-2009-4590
Cross-site scripting XSS vulnerability in baselocalrules.php in Basic Analysis and Security Engine BASE before 1.4.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
HP-UX Update for the Ignite-UX or the DynRootDisk (DRD) get_system_info Command HPSBUX02249
Check for the Version of the Ignite-UX or the DynRootDisk DRD getsysteminfo Command OpenVAS Vulnerability Test HP-UX Update for the Ignite-UX or the DynRootDisk DRD getsysteminfo Command HPSBUX02249 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...
CVE-2008-4590
CVE-2008-4590 affects Stash 1.0.3 and involves multiple SQL injection vulnerabilities. The issues allow remote attackers to execute arbitrary SQL commands via (1) the username parameter to admin/login.php and (2) the post parameter to admin/news.php. The NVD notes a base score of 7.5 (HIGH) with ...
CVE-2008-4590
creationtimestamp| type| source ---|---|--- 2008-10-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6714...
CVE-2008-2743
CVE-2008-2743 is a cross-site scripting (XSS) vulnerability in the embedded web server of Xerox 4110, 4590, and 4595 Copier/Printers. It allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors. CVSSv2 base score: 4.3 (MEDIUM) with network attack vector, no confid...
CVE-2007-4590
CVE-2007-4590 affects HP-UX environments where Ignite-UX (C.7.0–C.7.3) and DynRootDisk (DRD) (A.1.0.16.417–A.2.0.0.592) are used. The get_system_info command on HP-UX B.11.11/11.23/11.31 does not inform local users of networking changes it makes, with impact and attack vectors not clearly defined...
CVE-2006-4590
CVE-2006-4463 and CVE-2006-4590 describe SQL injection flaws in Jetstat.com JS ASP Faq Manager 1.10 and earlier. CVE-2006-4463 affects the administrator control panel via the pwd parameter; CVE-2006-4590 affects admin/default.asp via the uid parameter. Both allow remote attackers to potentially e...
CVE-2005-4590
CVE-2005-4590 : Affects Spb Kiosk Engine 1.0.0.1. Local users can bypass restrictions on allowed applications via (1) removable media with an autorun-executing program and (2) applications that invoke other apps, demonstrated by a file: URL for a .exe. Root cause is bypass of application-restrict...