69 matches found
CVE-2006-5996
This CVE entry is rejected/not used and does not represent an active vulnerability.
CVE-2016-5996
CVE-2016-5996 affects IBM Tealeaf Customer Experience web portal and is caused by not enforcing minimum password-length restrictions, enabling brute-force access attempts via remote authentication. Affected versions include 8.0–9.0.2 (with specific FP/Patch levels listed by IBM), notably 8.7.1.88...
CVE-2015-5996
CVE-2015-5996 affects Mediabridge Medialink Wireless-N Broadband Router MWN-WAPR300N (firmware 5.07.50). The vulnerability is Cross-Site Request Forgery (CSRF) in the web management interface, allowing an attacker to perform actions with the same permissions as a logged-in user, including potenti...
CVE-2015-5996
Cross-site request forgery CSRF vulnerability on Mediabridge Medialink MWN-WAPR300N devices with firmware 5.07.50 allows remote attackers to hijack the authentication of arbitrary users...
CVE-2014-5996
CVE-2014-5996 affects the Android app “DEKRA Used Car Report” (com.dekra.maengelreport) version 3.0.0, where X.509 certificate validation is not performed for SSL connections. This allows MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. The vulnerability...
CVE-2013-5996
EC-CUBE vulnerable to cross-site scripting (XSS) in the shopping/payment.tpl components. Affected product/version range: EC-CUBE 2.11.0 through 2.13.0. Root cause described as XSS via crafted values, enabling remote script/HTML execution in the user’s browser. Remediation: apply the update/patch ...
CVE-2008-5996
CVE-2008-5996 is a Cross-site scripting (XSS) vulnerability in the Drupal Simplenews module (5.x before 5.x-1.5 and 6.x before 6.x-1.0-beta4). It allows remote authenticated users who possess "administer taxonomy" permissions to inject arbitrary web script or HTML via a Newsletter category field....
CVE-2007-5996
CVE-2007-5996 describes an SQL injection vulnerability in the Softbiz Link Directory Script. The vulnerable component is the searchresult.php script, where user-provided sbcat_id can be exploited to execute arbitrary SQL commands. This CVE is related to CVE-2007-5449 (Softbiz Recipes Portal Scrip...