45 matches found
CVE-2013-5999
Kingsoft KDrive Personal for Windows is affected by CVE-2013-5999 where the product fails to verify SSL server certificates, enabling potential MITM eavesdropping. Affected versions include 1.21.0.1878 and earlier, with the 1.21.0.1880 threshold mentioned in the CVE description; the root cause is...
CVE-2008-5999
Cross-site scripting XSS vulnerability in the Ajax Checklist module 5.x before 5.x-1.1 for Drupal allows remote authenticated users, with create and edit permissions for posts, to inject arbitrary web script or HTML via unspecified vectors involving the ajaxchecklist filter...
CVE-2008-5999
CVE-2008-5999: In Drupal’s Ajax Checklist module (5.x) versions before 5.x-1.1, a cross-site scripting (XSS) vulnerability exists. Remote authenticated users with create/edit permissions for posts can inject arbitrary script/HTML via the ajax_checklist filter. Affected component is the Drupal Aja...
CVE-2007-5999
CVE-2007-5999 : SQL injection in the Softbiz Auctions Script, via the id parameter in product_desc.php. The issue stems from unsafely constructed SQL in this script, allowing remote attackers to execute arbitrary SQL commands. Public references indicate exploit availability and fixes are not deta...