48 matches found
November 2015 Android Security Bulletin
The Stagefright vulnerabilities are the gifts that keep on giving. Months after the potentially devastating security flaws in the mobile OS were publicly disclosed, Google continues to send out patches addressing vulnerabilities related to the initial reports. Today’s monthly Android security...
CVE-2012-6608
CVE-2012-6608 is a cross-site scripting (XSS) vulnerability in Elastix 2.3.0 affecting xmlservices/E_book.php, exploitable via the Page parameter. The issue is documented across multiple feeds: Elastix 2.3.0 E_book.php XSS (NVD/Red Hat/CVE lists) and OpenVAS summaries. Affected component is the w...
CVE-2012-6608
creationtimestamp| type| source ---|---|--- 2012-11-29 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38078...
CVE-2008-6608
DevelopItEasy Events Calendar 1.2 is affected by multiple SQL injection vulnerabilities. The flaws allow remote attackers to execute arbitrary SQL commands through (1) user_name (user field) or (2) user_pass (pass field) in admin/index.php, or (3) id in calendar_details.php. Root cause: improper ...
CVE-2008-6608
creationtimestamp| type| source ---|---|--- 2008-11-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7013...
CVE-2007-6608
CVE-2007-6608 : OpenBiblio 0.5.2-pre4 and earlier suffer multiple cross-site scripting (XSS) vulnerabilities due to unsanitized input in several admin pages. Specifically, the parameters (1) LAST and (2) FIRST to admin/staff_del_confirm.php, (3) name to admin/theme_del_confirm.php, and (4) themeN...
CVE-2006-6608
HP iLO (Integrated Lights Out) SSH key authentication vulnerability (CVE-2006-6608) affects ProLiant servers with iLO firmware 1.70–1.87 and iLO 2 firmware 1.00–1.11. The flaw enables remote unauthorized access due to a weakness in the SSH key based authentication mechanism. Documented impact is ...