CVE-2014-5322

Cross-site scripting XSS vulnerability in the Instant Web Publish function in FileMaker Pro before 13 and Pro Advanced before 13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-3640...

CVE-2013-5322

SQL injection vulnerability in the CoolURI extension before 1.0.30 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2013-5322

CVE-2013-5322 concerns the TYPO3 CoolURI extension. The connected sources confirm a SQL injection vulnerability in CoolURI before version 1.0.30, allowing remote attackers to execute arbitrary SQL commands via unspecified vectors. Affected component: CoolURI (TYPO3 extension); affected version: 1...

SQL Injection vulnerability in extension CoolURI (cooluri)

It has been discovered that the extension "CoolURI" cooluri is vulnerable to SQL Injection. Release Date: February 19, 2012 Bulletin Update: November 06, 2014 added CVE Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Versio...

CVE-2012-5322

Multiple cross-site scripting XSS vulnerabilities in Xavi X7968 allow remote attackers to inject arbitrary web script or HTML via the 1 pvcName parameter to webconfig/wan/confirm.html/confirm or 2 hostnametxtbox parameter to webconfig/lan/lanconfig.html/locallanconfig...

CVE-2012-5322

The CVE-2012-5322 entry concerns a Xavi X7968 device with multiple XSS flaws. The vulnerabilities allow remote attackers to inject arbitrary web script or HTML through two parameters: pvcName in webconfig/wan/confirm.html/confirm and host_name_txtbox in webconfig/lan/lan_config.html/local_lan_con...

CVE-2008-5322

The CVE-2008-5322 vulnerability affects Wysi Wiki Wyg 1.0. An invalid categup parameter to index.php triggers the phpinfo function, allowing remote attackers to obtain system information. The root cause is improper input handling leading to information disclosure through phpinfo. Public reference...

CVE-2007-5322

CVE-2007-5322 affects Microsoft Visual FoxPro 6.0 via the FPOLE.OCX 6.0.8450.0 ActiveX control. The vulnerability is an insecure method flaw that lets remote attackers run arbitrary programs by passing a command to the FoxDoCmd function. Public references indicate exploit availability (e.g., Expl...

CVE-2006-5322

CVE-2006-5322 affects phplist prior to 2.10.3 with multiple SQL injection vulnerabilities. The provided documents describe that remote attackers can execute arbitrary SQL commands via unspecified vectors. No explicit exploit details, impact vectors beyond SQL execution, or remediation steps are s...