3 matches found
CVE-2014-7499: Undefined Security Weakness
The Sword aka com.ireadercity.c25 application 3.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2008-0932
CVE-2008-0932 affects The SWORD Project’s Diatheke: diatheke.pl (Diatheke 1.5.9 and earlier) is vulnerable to remote command execution via shell metacharacters in the range parameter. Root cause: inadequate sanitization of shell meta-characters. Impact: remote attacker could run arbitrary command...
CVE-2008-0932: Improper Input Validation
diatheke.pl in The SWORD Project Diatheke 1.5.9 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the range parameter...