sandrahallphotography.com XSS vulnerability

Vulnerable URL: https://www.sandrahallphotography.com/dspProofImage.asp?width=1024=Samples%5CHorse%20Showsℑ=1"...

CVE-2010-5244

Untrusted search path vulnerability in SiSoftware Sandra 2010 Lite 2010.7.16.52 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .sis file. NOTE: some of these details are obtained from third...

Design/Logic Flaw

Untrusted search path vulnerability in SiSoftware Sandra 2010 Lite 2010.7.16.52 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .sis file. NOTE: some of these details are obtained from third...

CVE-2010-5244

CVE-2010-5244 involves untrusted search path vulnerability in SiSoftware Sandra 2010 Lite (version 2010.7.16.52). The root cause is that a Trojan horse dwmapi.dll placed in the current working directory can be loaded, enabling local users to gain privileges, as demonstrated by a directory contain...

CVE-2010-5244

Untrusted search path vulnerability in SiSoftware Sandra 2010 Lite 2010.7.16.52 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .sis file. NOTE: some of these details are obtained from third...

Code injection

sandra.sys 15.18.1.1 and earlier in the Sandra Device Driver in SiSoftware Sandra 16.10.2010.1 and earlier allows local users to gain privileges or cause a denial of service system crash via unspecified vectors involving "Model-Specific Registers."...

CVE-2010-1592

sandra.sys 15.18.1.1 and earlier in the Sandra Device Driver in SiSoftware Sandra 16.10.2010.1 and earlier allows local users to gain privileges or cause a denial of service system crash via unspecified vectors involving "Model-Specific Registers."...

CVE-2010-1592

CVE-2010-1592 affects the Sandra Device Driver (sandra.sys) in SiSoftware Sandra, up to version 15.18.1.1 and earlier. The vulnerability is described as allowing local users to gain privileges or cause a denial of service (system crash) via unspecified vectors involving Model-Specific Registers. ...

CVE-2010-1592

sandra.sys 15.18.1.1 and earlier in the Sandra Device Driver in SiSoftware Sandra 16.10.2010.1 and earlier allows local users to gain privileges or cause a denial of service system crash via unspecified vectors involving “Model-Specific Registers.” Recent assessments: Assessed Attacker Value: 0...