405 matches found
7 1 1 enterprise web site management program V6. 0 the presence of Cookies injection vulnerability-vulnerability warning-the black bar safety net
One: the dim keyword dim sortid keyword=request"keyword" sortid=request"sortid" if sortid"" then SQL where=SQL where &" and sortid="&sortid&"" if the keyword"" then SQL where=sqlwher &" and shopname like '%"&keyword&"%'" Set rs=Server. CreateObject"ADODB. RecordSet" strsql="select from Product...
CVE-2009-2867: Undefined Security Weakness
Unspecified vulnerability in Cisco IOS 12.2XNA, 12.2XNB, 12.2XNC, 12.2XND, 12.4T, 12.4XZ, and 12.4YA, when Zone-Based Policy Firewall SIP Inspection is enabled, allows remote attackers to cause a denial of service device reload via a crafted SIP transit packet, aka Bug ID CSCsr18691...
CVE-2008-5849
CVE-2008-5849 affects Check Point VPN-1 with Port Address Translation (PAT) enabled (notably Check Point VPN-1 R55 and R65). The issue is information disclosure: an attacker can remotely send a crafted packet to the firewall management port (18264/tcp) and trigger an ICMP TIMXCEED_INTRANS respons...
CVE-2008-3812
Cisco IOS 12.4, when IOS firewall Application Inspection Control AIC with HTTP Deep Packet Inspection is enabled, allows remote attackers to cause a denial of service device reload via a malformed HTTP transit packet...
CVE-2008-3812: Undefined Security Weakness
Cisco IOS 12.4, when IOS firewall Application Inspection Control AIC with HTTP Deep Packet Inspection is enabled, allows remote attackers to cause a denial of service device reload via a malformed HTTP transit packet...