CVE-2013-5210

CVE-2013-5210 affects the ADTRAN AOS NetVanta 7100: a cross-site scripting (XSS) vulnerability in the GUI login page present before R10.8.1 that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The public sources identify the affected product as the NetVanta...

CVE-2013-5210

Cross-site scripting XSS vulnerability in the GUI login page in ADTRAN AOS before R10.8.1 on the NetVanta 7100 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-7100

Buffer overflow in the unpacksms16 function in apps/appsms.c in Asterisk Open Source 1.8.x before 1.8.24.1, 10.x before 10.12.4, and 11.x before 11.6.1; Asterisk with Digiumphones 10.x-digiumphones before 10.12.4-digiumphones; and Certified Asterisk 1.8.x before 1.8.15-cert4 and 11.x before...

CVE-2013-7100

The connected MGASA-2014-0171 advisory provides concrete details for CVE-2013-7100: Asterisk before 11.6.1 decodes a 16‑bit SMS message with an odd length in the unpacksms16 function, causing an infinite loop and a crash due to memory corruption (buffer overflow). This is the root cause and the i...

CVE-2008-7100

DotNetNuke 4.4.1 through 4.8.4 is affected by an identity authentication bypass vulnerability described as an authentication bypass in which a flawed handling of a per-user action identifier and improper validation of a user identity can allow remote authenticated users to gain privileges. The Op...

CVE-2006-7100

CVE-2006-7100 is a PHP remote file inclusion vulnerability in the phpBB Insert User extension (version 0.1.2 and earlier). The flaw resides in includes/functions_mod_user.php and allows remote attackers to execute arbitrary PHP code by supplying a URL in the phpbb_root_path parameter. Affected pr...