51 matches found
Apache ActiveMQ web demos多个跨站脚本漏洞(CVE-2012-6092)
CVE ID:CVE-2012-6092 Apache ActiveMQ是一款开源消息总线，支持JMS1.1和J2EE 1.4规范的JMS Provider实现。 Apache ActiveMQ web demos存在多个跨站脚本漏洞，允许远程攻击者通过PortfolioPublishServlet.java的refresh参数也即/demo/portfolioPublish或Market Data...
CVE-2012-6092
Summary of CVE-2012-6092: Cross-site scripting in Apache ActiveMQ web demos Affected software: Apache ActiveMQ web demos (demo/portfolioPublish and related webapp/websocket/chat.js) prior to 5.8.0. What is vulnerable: Multiple XSS vulnerabilities via (1) refresh parameter to PortfolioPublishServl...
dotProject <= 2.1.6 Local File Include Vulnerability
dotProject is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
CVE-2008-6092
phpscripts Ranking Script allows remote attackers to bypass authentication and gain administrative access by sending an admin=ja cookie...
CVE-2008-6092
The CVE-2008-6092 entry concerns phpscripts Ranking Script where an attacker can bypass authentication and obtain administrative access by sending an admin=ja cookie. The NVD entry confirms remote authentication bypass with partial confidentiality/integrity/availability impact (CVSS v2 base score...
CVE-2008-6092
creationtimestamp| type| source ---|---|--- 2008-10-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6649...
CVE-2007-6092
Buffer overflow in libsrtp in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 has unknown impact and attack vectors. NOTE: it is not clear whether this issue crosses privilege boundaries...
CVE-2007-6092
Buffer overflow in libsrtp in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 has unknown impact and attack vectors. NOTE: it is not clear whether this issue crosses privilege boundaries...
CVE-2007-6092
CVE-2007-6092 affects Ingate Firewall prior to 4.6.0 and SIParator prior to 4.6.0 via a buffer overflow in libsrtp. The available descriptions state unknown impact and attack vectors, with uncertainty about privilege boundaries. No remediation or mitigation details are provided in the connected d...
CVE-2006-6092
The CVE-2006-6092 entries describe SQL injection vulnerabilities in the 20/20 Auto Gallery vehiclelistings.asp page. Affected component: vehiclelistings.asp in 20/20 Auto Gallery. Root cause: vulnerable parameters (vehicleID, categoryID_list, sale_type, stock_number, manufacturer, model, year, vi...