Design/Logic Flaw

The Dojo framework exchanges data using JavaScript Object Notation JSON without an associated protection scheme, which allows remote attackers to obtain the data via a web page that retrieves the data through a URL in the SRC attribute of a SCRIPT element and captures the data using other...

CVE-2007-2376

The Dojo framework exchanges data using JavaScript Object Notation JSON without an associated protection scheme, which allows remote attackers to obtain the data via a web page that retrieves the data through a URL in the SRC attribute of a SCRIPT element and captures the data using other...

CVE-2007-2376

The Dojo framework exchanges data using JavaScript Object Notation JSON without an associated protection scheme, which allows remote attackers to obtain the data via a web page that retrieves the data through a URL in the SRC attribute of a SCRIPT element and captures the data using other...

CVE-2007-2376

The CVE-2007-2376 entry describes a vulnerability in the Dojo framework where data is exchanged in JSON without a protective scheme, allowing remote attackers to exfiltrate data by loading a URL in the SRC attribute of a SCRIPT element and then reading it with other JavaScript. This results in pa...

PT-2007-3709 · Dojo Foundation · Dojo

Name of the Vulnerable Software and Affected Versions: Dojo framework affected versions not specified Description: The issue concerns the exchange of data using JavaScript Object Notation JSON without proper protection, allowing remote attackers to obtain the data. This is achieved through a web...

CVE-2006-3560

SQL injection vulnerability in topics.php in Blue Dojo Graffiti Forums 1.0 allows remote attackers to execute arbitrary SQL commands via the f parameter...

CVE-2006-3560

SQL injection vulnerability in topics.php in Blue Dojo Graffiti Forums 1.0 allows remote attackers to execute arbitrary SQL commands via the f parameter...

CVE-2006-3560

The CVE covers an SQL injection in topics.php of Blue Dojo Graffiti Forums 1.0, exploitable via the f parameter to execute arbitrary SQL commands remotely. This affects the application’s database interactions (vulnerability in a PHP script), with potential impacts to confidentiality, integrity, a...