CVE-2009-3539

Multiple cross-site scripting XSS vulnerabilities in YourFreeWorld Ultra Classifieds Pro allow remote attackers to inject arbitrary web script or HTML via the 1 cname parameter to subclass.php and the 2 sn parameter to listads.php...

CVE-2009-3539

Multiple cross-site scripting XSS vulnerabilities in YourFreeWorld Ultra Classifieds Pro allow remote attackers to inject arbitrary web script or HTML via the 1 cname parameter to subclass.php and the 2 sn parameter to listads.php...

CVE-2009-3539: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in YourFreeWorld Ultra Classifieds Pro allow remote attackers to inject arbitrary web script or HTML via the 1 cname parameter to subclass.php and the 2 sn parameter to listads.php...

Sql injection

SQL injection vulnerability in index.php in ProjectCMS 1.0 Beta allows remote attackers to execute arbitrary SQL commands via the sn parameter...

CVE-2009-1500: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in ProjectCMS 1.0 Beta allows remote attackers to execute arbitrary SQL commands via the sn parameter...

CVE-2008-5100

CVE-2008-5100 concerns the strong name (SN) implementation in Microsoft .NET Framework 2.0.50727 . The description in multiple connected sources states that SN validation relies on the Public Key Token embedded in the DLL’s pathname rather than the file’s own digital signature. This design flaw c...

CVE-2007-1240

CVE-2007-1240 involves multiple cross-site scripting (XSS) vulnerabilities in Docebo CMS 3.0.3 through 3.0.5. The flaws allow remote attackers to inject arbitrary web script or HTML via specific parameters: (1) searchkey to index.php, and (2) sn or (3) ri to modules/htmlframechat/index.php. The d...

CVE-2007-1240: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Docebo CMS 3.0.3 through 3.0.5 allow remote attackers to inject arbitrary web script or HTML via 1 the searchkey parameter to index.php, or the 2 sn or 3 ri parameter to modules/htmlframechat/index.php. NOTE: the provenance of this information ...

phpWebsite <= SQL Injection (friend.php) & (article.php)

+phpWebsite +DaBDouB-MoSiKaR Moroccan Security Team +creetz to: Moroccan security TeamDr.E-vil,Dr.Erase,H0550N,ToM-le-Magicianfrance , ameeregypt, Esp!onLeRaVaGe, CiM TeaM, xMs3D0,|ucifer,B6,al-houda membersnabil,sn!per,Kasparovand all hackers musilm morocco and www.lezr.com +special 10x to: safa...

CVE-2002-1596

CVE-2002-1596 affects Cisco SN 5420 Storage Router, up to version 1.1(5). A remote attacker can cause a denial-of-service (router crash) by sending an HTTP request with large headers. The provided materials state the issue and related Cisco advisory but do not include a specific patch version or ...

CVE-2002-1595

Cisco SN 5420 Storage Router 1.15 and earlier allows attackers to read configuration files without authorization...

CVE-2002-1595

The CVE-2002-1595 entry concerns Cisco SN 5420 Storage Router (version 1.1(5) and earlier). The vulnerability allows an attacker to read configuration files without authorization via network access (attack vector: network; authentication: none; impact: partial confidentiality). The NVD entry assi...

CVE-2002-1597

CVE-2002-1597 affects Cisco SN 5420 Storage Router, 1.1(5) and earlier. The issue allows remote attackers to cause a denial of service (halt) by sending a fragmented packet to the Gigabit interface. The available sources state this vulnerability but do not provide root-cause details or a document...

CVE-2002-1597

Cisco SN 5420 Storage Router 1.15 and earlier allows remote attackers to cause a denial of service halt via a fragmented packet to the Gigabit interface...

CVE-2002-1596: Undefined Security Weakness

Cisco SN 5420 Storage Router 1.15 and earlier allows remote attackers to cause a denial of service router crash via an HTTP request with large headers...

CVE-2002-1595: Undefined Security Weakness

Cisco SN 5420 Storage Router 1.15 and earlier allows attackers to read configuration files without authorization...

CVE-2002-1597: Undefined Security Weakness

Cisco SN 5420 Storage Router 1.15 and earlier allows remote attackers to cause a denial of service halt via a fragmented packet to the Gigabit interface...

CVE-2001-1038

The CVE-2001-1038 entry affects Cisco SN 5420 Storage Router 1.1(3) and earlier. A remote attacker can trigger a denial-of-service reboot by establishing a series of connections to TCP port 8023. The available references confirm the affected device and the reboot impact, but do not provide exploi...

CVE-2001-1037

Cisco SN 5420 Storage Router (versions 1.1(3) and earlier) is affected by CVE-2001-1037, where local users can access a developer’s shell without a password and execute certain restricted commands without being logged. The vulnerability arises in the device’s local shell access mechanism, enablin...

CVE-2001-1037: Undefined Security Weakness

Cisco SN 5420 Storage Router 1.13 and earlier allows local users to access a developer's shell without a password and execute certain restricted commands without being logged...