CVE-2016-6266

Technical details sufficient to assess the vulnerability are not publicly provided in the supplied documents; please monitor for updates.

CVE-2015-6266

The guest portal in Cisco Identity Services Engine ISE 3300 1.20.899 does not restrict access to uploaded HTML documents, which allows remote attackers to obtain sensitive information from customized documents via a direct request, aka Bug ID CSCuo78045...

CVE-2015-6266

CVE-2015-6266 affects Cisco Identity Services Engine (ISE) guest portal, where the portal does not restrict access to uploaded HTML documents. The underlying issue is lack of access control for customized HTML files, allowing remote attackers to retrieve sensitive information by requesting the fi...

Schweitzer Engineering Laboratories (SEL) Management Server Detection (SCADA)

Binary data 6266.prm...

SuSE 10 Security Update : RealPlayer (ZYPP Patch Number 6266)

RealPlayer 10 is vulnerable to a critical security problem in the flash plugin CVE-2007-5400. Real does not provide updated binaries of RealPlayer 10 and SUSE is not allowed to ship RealPlayer 11. Therefore this update disables the flash plugin by setting restrictive file system permissions...

CVE-2008-6266

CVE-2008-6266 concerns an SQL injection in Appalachian State University phpWebSite’s links.php. The vulnerability allows remote attackers to inject SQL via the cid parameter in a viewlink action, enabling arbitrary SQL execution on the backend. This is documented across multiple sources (NVD/NVD-...

CVE-2008-6266

creationtimestamp| type| source ---|---|--- 2008-10-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32553...

CVE-2007-6266

Multiple SQL injection vulnerabilities in bcoos 1.0.10 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the gid parameter to modules/arcade/index.php in a showstats action, or the lid parameter to 2 modules/myalbum/ratephoto.php or 3 modules/mylinks/ratelink.php, differe...

CVE-2007-6266

CVE-2007-6266 applies to the bcoos CMS (versions 1.0.10 and earlier). The affected components expose multiple SQL injection weaknesses that allow remote attackers to run arbitrary SQL commands. Attack vectors include: (1) gid parameter to modules/arcade/index.php in a show_stats action, (2) lid p...

CVE-2006-6266

CVE-2006-6266 concerns Teredo clients: when following RFC4380-5.2.3 item 6, Teredo clients initiate direct IPv6 connectivity (ping) tests in response to non-Teredo source addresses, potentially causing affected clients to send packets to third parties. The provided documents describe the behavior...