3 matches found
U.S. Dept Of Defense: SQLi in LASCO CME Query
A SQL injection vulnerability was discovered in the "CME DateTime" parameter on the LASCO CME Query form. The vulnerability allows an attacker to execute arbitrary SQL commands on the server...
Heap overflow
Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted file-date-time parameter in a printer-url...