CVE-2012-5785

Apache Axis2/Java 1.6.2 and earlier does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

CVE-2012-5785

CVE-2012-5785 concerns Apache Axis2/Java where server hostname verification against the certificate CN/SubjectAltName is not performed, enabling MITM spoofing with any valid certificate. Connected documents confirm multiple IBM advisories and IBM BPM/TDI/IMS products affected by this Axis2 SSL is...

CVE-2008-5785

CVE-2008-5785 affects V3 Chat - Profiles/Dating Script 3.0.2. The vulnerability is a SQL injection in the login mechanism, exploitable via the username and password fields, allowing remote execution of arbitrary SQL commands. The available sources confirm the affected product and the injection ve...

CVE-2007-5785

CVE-2007-5785 describes an SQL injection in JobSite Professional 2.0, affecting the vulnerable component: file.php. The flaw allows remote attackers to execute arbitrary SQL commands via the id parameter, with a CVSS v2 base score of 7.5 (HIGH) and impacts to confidentiality, integrity, and avail...

CVE-2006-5785

SAP Web Application Server is affected by CVE-2006-5785. The issue allows remote denial of service (enserver.exe crash) on UDP port 64999 via a 0x72F2 sequence for SAP Web Application Server 6.40 before patch 136 and 7.00 before patch 66. The vulnerability is confirmed in the NVD entry for CVE-20...