283 matches found
OSC Visitor Web Stats SQL Injection
Popular OSC add-on Visitor Web Stats is completely vulnerable to SQL injections. Although it uses request data i. e. the Accept-Language header, there's no escaping at all. This also applies to the extension's derivative for OSC 3, who's author completely inherited the insufficient code structure...
CVE-2008-0330
Open System Consultants (OSC) Radiator before 4.0 is vulnerable to a remote denial-of-service through malformed RADIUS requests, as demonstrated by nmap. The affected software is OSC Radiator (pre-4.0). The underlying cause is a handling flaw in processing RADIUS messages that allows crafted pack...
CVE-2008-0330: Improper Authentication
Open System Consultants OSC Radiator before 4.0 allows remote attackers to cause a denial of service daemon crash via malformed RADIUS requests, as demonstrated by packets sent by nmap...