66 matches found
CVE-2013-5487
CVE-2013-5487 affects Cisco Prime Data Center Network Manager (DCNM) DCNM-SAN Server prior to version 6.2(1). The vulnerability permits remote attackers to read arbitrary files. Root cause cited in multiple sources is insecure DownloadServlet handling (lack of authentication and insufficient inpu...
CVE-2008-5487
CVE-2008-5487 affects TurnkeyForms Text Link Sales: vulnerable admin.php parameter id enables cross-site scripting (XSS) by injecting arbitrary script/HTML. CVSS 2.0 base score 4.3 (Medium). No remediation details provided in the supplied documents.
CVE-2008-5487
creationtimestamp| type| source ---|---|--- 2008-11-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7124...
CVE-2007-5487
CVE-2007-5487 describes a stack-based buffer overflow in COWON America jetAudio Basic 7.0.3 that can be triggered by a crafted URL in an EXTM3U section of an .m3u file. The underlying cause is a stack-based overflow allowing user-assisted remote attackers to execute arbitrary code on affected sys...
CVE-2006-5487
Directory traversal vulnerability in Marshal MailMarshal SMTP 5.x, 6.x, and 2006, and MailMarshal for Exchange 5.x, allows remote attackers to write arbitrary files via ".." sequences in filenames in an ARJ compressed archive...
CVE-2006-5487
CVE-2006-5487 affects Marshal MailMarshal products: SMTP 5.x, 6.x, 2006, and MailMarshal for Exchange 5.x. The root cause is improper sandboxing during ARJ attachment extraction, allowing directory traversal via "../" in filenames to place or write files in arbitrary locations. Reports describe p...