44 matches found
openSUSE 10 Security Update : icu (icu-6322)
icu does not properly handle invalid byte sequences during Unicode conversion. Remote attackers could potentially exploit that to conduct conduct cross-site scripting XSS attacks CVE-2009-0153. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...
CVE-2008-6322
CVE-2008-6322 concerns an SQL injection in index.cfm of the CFMSource CFMBlog. The vulnerability is exploitable via the categorynbr parameter, enabling remote attackers to execute arbitrary SQL commands. The issue is characterized with CVSS v2.0 base score 7.5 (HIGH) and network access with low a...
CVE-2008-6322
creationtimestamp| type| source ---|---|--- 2008-12-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7415...
CVE-2007-6322
CVE-2007-6322 affects xml2owl 0.1.1 where filedownload.php is vulnerable to a directory traversal via the file parameter (..), allowing remote attackers to read arbitrary files. The vulnerability is a path-traversal flaw reported in multiple sources (NVD entry and CVE record). The provided docume...