CVE-2006-6245

Multiple SQL injection vulnerabilities in Photo Organizer PO 2.32b and earlier allow remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2006-6245

Photo Organizer (PO) versions up to 2.32b are affected by multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands via unspecified vectors. The underlying issue is an input handling flaw enabling SQL injection, impacting data confidentiality, integrity,...

CVE-2006-6246

Photo Organizer 2.32b and earlier does not properly check the ownership of certain objects, which allows remote attackers to gain unauthorized access via vectors related to 1 camera del, 2 camera edit, 3 folder/album deletion, 4 photo.move, 5 content.indexer, 6 folder.content, and possibly other...

CVE-2006-6245

Multiple SQL injection vulnerabilities in Photo Organizer PO 2.32b and earlier allow remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2006-6246

CVE-2006-6246 affects Photo Organizer 2.32b and earlier. The issue is improper ownership checks on objects, enabling remote attackers to gain unauthorized access through vectors including (1) camera delete, (2) camera edit, (3) folder/album deletion, (4) photo.move, (5) content.indexer, and (6) f...

CVE-2006-5489

Research in Motion RIM BlackBerry Enterprise Server 4.1 SP2 before Hotfix 1 for IBM Lotus Domino might allow attackers with meeting organizer privileges to cause a denial of service application hang via a deleted recurrent meeting instance when changing the attendee's calendar meeting time...

CVE-2006-5237

SQL injection vulnerability in Blue Smiley Organizer before 4.46 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2006-5238

Unspecified vulnerability in the file upload module in Blue Smiley Organizer before 4.45 has unknown impact and attack vectors...

CVE-2006-5237

SQL injection vulnerability in Blue Smiley Organizer before 4.46 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2006-5238

Unspecified vulnerability in the file upload module in Blue Smiley Organizer before 4.45 has unknown impact and attack vectors...

PT-2006-5972 · Unknown · Blue Smiley Organizer

Name of the Vulnerable Software and Affected Versions: Blue Smiley Organizer versions prior to 4.46 Description: The issue allows remote attackers to execute arbitrary SQL commands. Recommendations: For versions prior to 4.46, update to version 4.46 or later to resolve the issue...

CVE-2006-5237

CVE-2006-5237 describes an SQL injection in Blue Smiley Organizer prior to version 4.46. The vulnerability allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Affected: Blue Smiley Organizer

CVE-2006-5238

Blue Smiley Organizer prior to 4.45 contains an unspecified vulnerability in the file upload module. The affected component is the file upload subsystem, with unknown impact and attack vectors documented in CVE-2006-5238. The only concrete remediation provided across connected sources is to upgra...

PT-2006-5973 · Unknown · Blue Smiley Organizer

Name of the Vulnerable Software and Affected Versions: Blue Smiley Organizer versions prior to 4.45 Description: The issue concerns an unspecified vulnerability in the file upload module. The impact and attack vectors of this issue are unknown. Recommendations: For versions prior to 4.45, update ...

CVE-2005-0821

Unknown vulnerability in Citrix MetaFrame Conferencing Manager 3.0 allows conference members to bypass organizer restrictions to control the keyboard and mouse...

AZL-7383 CVE-2005-0868 affecting package tn5250 0.17.4-26

AS/400 Telnet 5250 terminal emulation clients, as implemented by 1 IBM client access, 2 Bosanova, 3 PowerTerm, 4 Mochasoft, and possibly other emulations, allows malicious AS/400 servers to execute arbitrary commands via a STRPCO Start PC Organizer command followed by STRPCCMD Start PC command, a...

AZL-37051 CVE-2005-0868 affecting package tn5250 0.17.6-4

AS/400 Telnet 5250 terminal emulation clients, as implemented by 1 IBM client access, 2 Bosanova, 3 PowerTerm, 4 Mochasoft, and possibly other emulations, allows malicious AS/400 servers to execute arbitrary commands via a STRPCO Start PC Organizer command followed by STRPCCMD Start PC command, a...

CVE-2005-0821

Citrix MetaFrame Conferencing Manager 3.0 is cited as vulnerable in CVE-2005-0821, with the issue described as a bypass of organizer restrictions that allows conference members to control the keyboard and mouse. The connected documents confirm the affected product and the general impact but do no...

CVE-2005-0821

Unknown vulnerability in Citrix MetaFrame Conferencing Manager 3.0 allows conference members to bypass organizer restrictions to control the keyboard and mouse...