142 matches found
CVE-2007-4385
OWASP Stinger before 2.5 allows remote attackers to bypass input validation routines by using multipart encoded requests instead of form-urlencoded requests. NOTE: this might be used to expose vulnerabilities in applications that would otherwise be protected by the validation routines...
6.9AI score0.03075EPSS
SaveExploits2References8
Cisco CallManager Web Interface Input Validation Bypass Vulnerability
Cisco CallManager versions 4.31 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to bypass security restrictions and conduct cross-site scripting attacks. This vulnerability exists due to insufficient sanitization of user-supplied input to the CallManager web...
4.3CVSS6.4AI score0.06492EPSS
SaveExploits2References1
20