809 matches found
RaidenHTTPD 1.1.49 - SoftParserFileXml Remote Code Execution
RaidenHTTPD 1.1.49 - SoftParserFileXml Remote Code Execution !/usr/bin/php -q -d shortopentag=on ? printr' ----------------------------------------------------------------------------- RaidenHTTPD/1.1.49 remote commands execution exploit by rgod [email protected] site:...
CVE-2006-3907
Siemens SpeedStream 2624 allows remote attackers to cause a denial of service device hang by sending a crafted packet to the web administrative interface...
CVE-2006-3907: Undefined Security Weakness
Siemens SpeedStream 2624 allows remote attackers to cause a denial of service device hang by sending a crafted packet to the web administrative interface...
Multiple Cisco Security Monitoring, Analysis and Response System security vulnerabilities
Default preconfigured Oracle databse account, JBoss code execution, multiple administrative interface code executions...
CVE-2006-2830
The CVE-2006-2830 entry describes a buffer-overflow vulnerability in the HTTP administrative interface of TIBCO Rendezvous before 7.5.1, TIBCO Runtime Agent (TRA) before 5.4, and Hawk before 4.6.1. Remote attackers could trigger a denial of service and possibly execute arbitrary code via the HTTP...
CVE-2006-2830: Undefined Security Weakness
Buffer overflow in TIBCO Rendezvous before 7.5.1, TIBCO Runtime Agent TRA before 5.4, and Hawk before 4.6.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via the HTTP administrative interface...
CVE-2006-2477: Undefined Security Weakness
Cross-site scripting XSS vulnerability in the administrative interface Bitrix Site Manager 4.1.x allows remote attackers to inject arbitrary web script or HTML via unspecified inputs...
[SA20067] ManageEngine OpManager "searchTerm" Cross-Site Scripting
TITLE: ManageEngine OpManager "searchTerm" Cross-Site Scripting SECUNIA ADVISORY ID: SA20067 VERIFY ADVISORY: http://secunia.com/advisories/20067/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: ManageEngine OpManager 6.x http://secunia.com/product/9902/...
CVE-2006-0571
Multiple cross-site scripting XSS vulnerabilities in phpstatus 1.0 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors in the administrative interface...
CVE-2006-0570
Multiple SQL injection vulnerabilities in phpstatus 1.0, when gpcmagicquotes is disabled, allow remote attackers to execute arbitrary SQL commands and bypass authentication via 1 the username parameter in check.php and 2 unknown attack vectors in the administrative interface...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in phpstatus 1.0 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors in the administrative interface...
CVE-2006-0571
Multiple cross-site scripting XSS vulnerabilities in phpstatus 1.0 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors in the administrative interface...
CVE-2006-0571: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in phpstatus 1.0 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors in the administrative interface...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Easy CMS allow remote attackers to inject arbitrary web script or HTML via 1 unknown attack vectors in the administrative interface and 2 input fields of the contact form...
CVE-2006-0507: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in Easy CMS allow remote attackers to inject arbitrary web script or HTML via 1 unknown attack vectors in the administrative interface and 2 input fields of the contact form...
CVE-2005-4658
Multiple cross-site scripting XSS vulnerabilities in ASP-Programmers.com ASPKnowledgebase allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors in the administrative interface...
CVE-2005-4658
CVE-2005-4658 describes multiple cross-site scripting (XSS) vulnerabilities in ASP-Programmers.com ASPKnowledgebase. Affected component: the administrative interface of ASPKnowledgebase. Root cause: unspecified XSS flaws that allow remote attackers to inject arbitrary scripts or HTML via unknown ...
CVE-2005-4658: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in ASP-Programmers.com ASPKnowledgebase allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors in the administrative interface...
CVE-2005-4658
Multiple cross-site scripting XSS vulnerabilities in ASP-Programmers.com ASPKnowledgebase allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors in the administrative interface...