CVE-2019-7349

CVE-2019-7349 affects ZoneMinder (up to and including 1.32.3). The vulnerability is a reflected Cross-Site Scripting (XSS) in the view_monitor code path, exploitable via the vulnerable parameter newMonitor[V4LCapturesPerFrame] in monitor.php due to insufficient input filtration. Successful exploi...

CVE-2015-7349

Cross-site scripting XSS vulnerability in the sample feedback.inc file in VASCO DIGIPASS authentication plug-in for Citrix Web Interface allows remote attackers to inject arbitrary web script or HTML via the failmessage parameter...

CVE-2015-7349

CVE-2015-7349 describes a Cross-site scripting (XSS) vulnerability in the sample feedback.inc file of the VASCO DIGIPASS authentication plug-in used by Citrix Web Interface. The issue allows remote attackers to inject arbitrary web script or HTML via the failmessage parameter. Documented impact i...

CVE-2016-7349

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016. Notes: none...

CVE-2016-7349

...

CVE-2016-7349

CVE-2016-7349 is rejected/not used per the Initial Description.

CVE-2014-7349

CVE-2014-7349 is rejected/not used; this candidate does not represent an active vulnerability entry.

Sql injection

Multiple SQL injection vulnerabilities in Gnew 2013.1 allow remote attackers to execute arbitrary SQL commands via the 1 answerid or 2 questionid parameter to polls/vote.php, 3 storyid parameter to comments/add.php or 4 comments/edit.php, or 5 threadid parameter to posts/add.php. NOTE: this issue...

solaris/sparc executes command after setreuid (92 bytes + cmd)

No description provided by source. / bunkersparcexec.c V1.0 - Sat Oct 21 17:45:27 CEST 2006 Solaris/sparc bytecode that executes command after setreuid 92 bytes + cmd setreuid0, 0 + execve"/bin/sh", "/bin/sh","-c","cmd", NULL; bunker - http://rawlab.mindcreations.com...