21 matches found
EUVD-2006-2326
Malware in sbrugna...
SUSE CVE-2005-1349
Buffer overflow in Convert-UUlib Convert::UUlib before 1.051 allows remote attackers to execute arbitrary code via a malformed parameter to a read operation...
CVE-2018-16353
An issue was discovered in FHCRM through 2018-02-11. There is a SQL injection via the /index.php/Customer/read limit parameter...
CVE-2018-10713
An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as a 'read' parameter to the '/userfs/bin/tcapi' binary in the Diagnostics component using the 'read ' function and cause memory corruption. Furthermore, it is possible to redirect the flow of...
PT-2018-3905 · D Link · D-Link Dsl-3782
Name of the Vulnerable Software and Affected Versions: D-Link DSL-3782 EU version 1.01 Description: An issue in the Diagnostics component of the D-Link DSL-3782 EU device allows an authenticated user to cause memory corruption by passing a long buffer as a read parameter to the /userfs/bin/tcapi...
CVE-2008-3343: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in staticpages/easypublish/index.php in MyioSoft EasyPublish 3.0tr trial edition allows remote attackers to execute arbitrary SQL commands via the read parameter in a search action...
CVE-2008-3347: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in staticpages/easycalendar/index.php in MyioSoft EasyDynamicPages 3.0 trial edition tr allows remote attackers to execute arbitrary SQL commands via the read parameter...
CVE-2008-3342: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in staticpages/easypublish/index.php in MyioSoft EasyPublish 3.0tr allows remote attackers to inject arbitrary web script or HTML via the read parameter in an edpNews action...
CVE-2008-1649: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in staticpages/easypublish/index.php in EasyNews 4.0 allows remote attackers to inject arbitrary web script or HTML via the read parameter in an edppupublish action...
CVE-2008-1650: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in dynamicpages/index.php in EasyNews 4.0 allows remote attackers to execute arbitrary SQL commands via the read parameter in an edpHelpInternalNews action...
CVE-2006-7099
Directory traversal vulnerability in index.php in SolarPay allows remote attackers to read certain files via a .. dot dot in the read parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-4358
Cross-site scripting XSS vulnerability in index.php in Diesel Pay allows remote attackers to inject arbitrary web script or HTML via the read parameter...
CVE-2006-4358
Cross-site scripting XSS vulnerability in index.php in Diesel Pay allows remote attackers to inject arbitrary web script or HTML via the read parameter...
CVE-2006-4358: Undefined Security Weakness
Cross-site scripting XSS vulnerability in index.php in Diesel Pay allows remote attackers to inject arbitrary web script or HTML via the read parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in index.php in OnlyScript.info Online Universal Payment System Script allows remote attackers to inject arbitrary web script or HTML via the read parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third part...
CVE-2006-2325
Cross-site scripting XSS vulnerability in index.php in OnlyScript.info Online Universal Payment System Script allows remote attackers to inject arbitrary web script or HTML via the read parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third part...
CVE-2006-2325: Undefined Security Weakness
Cross-site scripting XSS vulnerability in index.php in OnlyScript.info Online Universal Payment System Script allows remote attackers to inject arbitrary web script or HTML via the read parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third part...
CVE-2006-2326: Undefined Security Weakness
Directory traversal vulnerability in index.php in OnlyScript.info Online Universal Payment System Script allows remote attackers to read arbitrary files via directory traversal sequences in the read parameter. NOTE: the provenance of this information is unknown; the details are obtained solely fr...