iTunes < 10.0 Multiple Vulnerabilities

Binary data 5653.prm...

CVE-2008-5653

SQL injection vulnerability in the loginADP function in ajaxp.php in MyioSoft AjaxPortal 3.0 allows remote attackers to execute arbitrary SQL commands via the rsargs parameter, as reachable through the username parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-5653

CVE-2008-5653 affects MyioSoft AjaxPortal 3.0. The vulnerability is an SQL injection in the loginADP function of ajaxp.php, exploitable via the rsargs parameter as reachable through the username parameter. Remote attackers could potentially execute arbitrary SQL commands. Several sources (NVD ent...

CVE-2008-5653

creationtimestamp| type| source ---|---|--- 2008-11-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7044...

Cross site scripting

Cross-site scripting XSS vulnerability in Sun Java System Messaging Server 6.0 through 6.3, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly a related issue to CVE-2006-5653...

CVE-2007-2904

Cross-site scripting XSS vulnerability in Sun Java System Messaging Server 6.0 through 6.3, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly a related issue to CVE-2006-5653...

CVE-2007-2904

Sun Java System Messaging Server 6.0–6.3 is affected by CVE-2007-2904, a cross-site scripting (XSS) vulnerability exploitable via unspecified vectors when using Internet Explorer. The issue allows remote attackers to inject arbitrary web script or HTML. The vulnerability is related to CVE-2006-56...

CVE-2006-5653

Sun Java System Messenger Express 6 is affected by a cross-site scripting (XSS) vulnerability in the errorHTML function of the index script, exploitable via the error parameter. The issue enables remote injection of script/HTML and is cataloged as CVE-2006-5653 with a MEDIUM impact (PARTIAL integ...

CVE-2006-5653

Cross-site scripting XSS vulnerability in the errorHTML function in the index script in Sun Java System Messenger Express 6 allows remote attackers to inject arbitrary web script or HTML via the error parameter. NOTE: this issue might be related to CVE-2006-5486, however due to the vagueness of t...