CVE-2008-1681

Unspecified vulnerability in IBM DB2 Content Manager before 8.3 FP8 has unknown impact and attack vectors related to the AllowedTrustedLogin privilege...

CVE-2008-1681

Unspecified vulnerability in IBM DB2 Content Manager before 8.3 FP8 has unknown impact and attack vectors related to the AllowedTrustedLogin privilege...

CVE-2008-1681

Technical details about CVE-2008-1681 are not provided in the supplied documents; no affected products, vulnerable components, impact, or fixes are disclosed. Monitor for updates from official advisories.

CVE-2008-1681: Undefined Security Weakness

Unspecified vulnerability in IBM DB2 Content Manager before 8.3 FP8 has unknown impact and attack vectors related to the AllowedTrustedLogin privilege...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Savvy Content Manager CM allow remote attackers to inject arbitrary web script or HTML via the searchterms parameter to 1 searchresults.cfm, 2 searchresults.cfm, and 3 searchresults/index.cfm. NOTE: the provenance of this information is unknown...

CVE-2008-1306

Multiple cross-site scripting XSS vulnerabilities in Savvy Content Manager CM allow remote attackers to inject arbitrary web script or HTML via the searchterms parameter to 1 searchresults.cfm, 2 searchresults.cfm, and 3 searchresults/index.cfm. NOTE: the provenance of this information is unknown...

CVE-2008-1306

Multiple cross-site scripting XSS vulnerabilities in Savvy Content Manager CM allow remote attackers to inject arbitrary web script or HTML via the searchterms parameter to 1 searchresults.cfm, 2 searchresults.cfm, and 3 searchresults/index.cfm. NOTE: the provenance of this information is unknown...

CVE-2008-1306

This CVE (CVE-2008-1306) concerns multiple XSS vulnerabilities in Savvy Content Manager CM. The issues allow remote attackers to inject arbitrary web script or HTML via the searchterms parameter to three pages: searchresults.cfm, search_results.cfm, and search_results/index.cfm. The NVD entry lis...

CVE-2008-1306: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Savvy Content Manager CM allow remote attackers to inject arbitrary web script or HTML via the searchterms parameter to 1 searchresults.cfm, 2 searchresults.cfm, and 3 searchresults/index.cfm. NOTE: the provenance of this information is unknown...

CVE-2007-6525

Unspecified vulnerability in eClient in IBM DB2 Content Manager CM Toolkit 8.3 before fix pack 7 for z/OS has unknown impact and attack vectors, related to "scripting."...

Design/Logic Flaw

Unspecified vulnerability in eClient in IBM DB2 Content Manager CM Toolkit 8.3 before fix pack 7 for z/OS has unknown impact and attack vectors, related to "scripting."...

CVE-2007-6525

Unspecified vulnerability in eClient in IBM DB2 Content Manager CM Toolkit 8.3 before fix pack 7 for z/OS has unknown impact and attack vectors, related to "scripting."...

CVE-2007-6525

Unspecified vulnerability in eClient in IBM DB2 Content Manager CM Toolkit 8.3 before fix pack 7 for z/OS has unknown impact and attack vectors, related to "scripting."...

CVE-2007-6525

CVE-2007-6525 affects IBM DB2 Content Manager (CM) Toolkit 8.3 for z/OS, specifically the eClient component. The vulnerability type is unspecified; impact and attack vectors are not detailed in the provided documents, which reference “scripting” but do not describe exploitability. The description...

CVE-2007-6525: Undefined Security Weakness

Unspecified vulnerability in eClient in IBM DB2 Content Manager CM Toolkit 8.3 before fix pack 7 for z/OS has unknown impact and attack vectors, related to "scripting."...

eGov Content Manager Cross Site Scripting Vulrnability

HSC eGov Content Manager Cross Site Scripting Vulrnability The eGov Manager was designed to simplify the efforts of government staffers who are responsible for posting public documents, news updates, events, managing staff directories and online services. This issue is due to a failure in the...

Micro CMS 3.5 (revert-content.php) Remote SQL Injection Vulnerability

No description provided by source. not sec group http://www.notsec.com [email protected] Micro CMS 3.5 Class: SQL Injection Found: 28/08/2007 Remote: Yes Site: http://www.impliedbydesign.com/ibd-micro-cms-static-content-manager.html Download: http://www.impliedbydesign.com/apps/microcms/microcms.zi...

iDefense Security Advisory 06.21.07: Ingres Database Multiple Heap Corruption Vulnerabilities

Ingres Database Multiple Heap Corruption Vulnerabilities iDefense Security Advisory 06.21.07 http://labs.idefense.com/intelligence/vulnerabilities/ Jun 21, 2007 I. BACKGROUND Ingres is the database backend used by default in several CA products. The SCM Secure Content Manager is one of the produc...

Heap overflow

Multiple heap-based buffer overflows in the 1 Communications Server iigcc.exe and 2 Data Access Server iigcd.exe components for Ingres Database Server 3.0.3, as used in CA Computer Associates products including eTrust Secure Content Manager r8 on Windows, allow remote attackers to execute arbitra...

CVE-2007-3334

Multiple heap-based buffer overflows in the 1 Communications Server iigcc.exe and 2 Data Access Server iigcd.exe components for Ingres Database Server 3.0.3, as used in CA Computer Associates products including eTrust Secure Content Manager r8 on Windows, allow remote attackers to execute arbitra...