35 matches found
CVE-2018-6902
Affected product: PHP Scripts Mall Image Sharing Script 1.3.3. Vulnerability: Cross-Site Scripting (XSS) via the Full Name field in an Edit Profile action. Root cause/details are not fully described in the provided documents beyond the XSS label. Impact ranges from low to medium according to CVSS...
CVE-2015-6902
CVE-2015-6902 is rejected and not used; it does not represent an active vulnerability entry.
MGASA-2017-0126 Updated python-lshell package fixes security vulnerabilities
Shell outbreak due to bad syntax parse CVE-2016-6902. Shell outbreak with multiline commands CVE-2016-6903...
CVE-2016-6902
lshell 0.9.16 allows remote authenticated users to break out of a limited shell and execute arbitrary commands...
CVE-2016-6902
CVE-2016-6902 concerns lshell 0.9.16, where remote authenticated users can break out of a limited shell and execute arbitrary commands. The vulnerability is documented across multiple feeds, with NVD noting high/critical impact (NETWORK, low/low credentials, no user interaction) and Mageia OSV/OS...
CVE-2017-6902
CVE-2017-6902 entry is rejected/not used; the CNA withdrew it and it is not a security issue.
CVE-2014-6902
The CVE-2014-6902 entry concerns the Android app Anjuke (com.anjuke.android.app) version 7.1.7, which does not verify X.509 certificates from SSL servers. This root cause enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The connected...
CVE-2013-6902
This CVE affects Cybozu Garoon up to version 3.7.0, where the Space function is vulnerable to Cross-site Scripting (XSS). The root cause is unspecified vectors allowing remote attackers to inject arbitrary script/HTML, potentially executing in a user’s browser. Public sources (NVD/JVN) confirm mu...
EAServer <= 6.3.1 Multiple Vulnerabilities
Binary data 6902.prm...
2532|Gigs <= 1.2.2 Multiple Vulnerabilities - Active Check
2532-Gigs is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:2532gigs:2532gigs"; ifdescription...
CVE-2008-6902
CVE-2008-6902 affects the 2532|Gigs product (2532designs) <= 1.2.2 Stable. The vulnerability is an unrestricted file upload in upload_flyer.php that allows a remote attacker to upload a file with an executable extension and access it under flyers/, potentially enabling arbitrary code execution...
CVE-2008-6902
creationtimestamp| type| source ---|---|--- 2008-12-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7510...
CVE-2006-6902
Technical details about CVE-2006-6902 are not publicly available in the provided documents. The records describe an unspecified vulnerability in the Bluetooth stack of Windows Mobile Pocket PC edition, with no vectors, affected versions, or fixes detailed. Monitor for updates.