10 matches found
EUVD-2009-3302
Malware in sbrugna...
EUVD-2009-3405
Malware in sbrugna...
CVE-2009-3423
login.php in Zenas PaoLink 1.0, when registerglobals is enabled, allows remote attackers to bypass authentication and gain administrative access by setting the loginok parameter to 1...
Authentication flaw
login.php in Zenas PaoLink 1.0, when registerglobals is enabled, allows remote attackers to bypass authentication and gain administrative access by setting the loginok parameter to 1...
CVE-2009-3423
CVE-2009-3423 affects Zenas PaoLink 1.0. When login_globals is enabled, an attacker can bypass authentication by setting the login_ok parameter to 1 in login.php, gaining administrative access. The NVD entry records a CVSSv2 base score of 6.8 (MEDIUM) with network attack vector and no authenticat...
CVE-2009-3423
login.php in Zenas PaoLink 1.0, when registerglobals is enabled, allows remote attackers to bypass authentication and gain administrative access by setting the loginok parameter to 1...
CVE-2009-3320
Cross-site scripting XSS vulnerability in scrivi.php in Zenas PaoLink aka Pao-Link 1.0 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...
Cross site scripting
Cross-site scripting XSS vulnerability in scrivi.php in Zenas PaoLink aka Pao-Link 1.0 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...
CVE-2009-3320
CVE-2009-3320 is an XSS vulnerability in Zenas PaoLink (aka Pao-Link) 1.0, where an attacker can inject arbitrary script/HTML via the PATH_INFO in scrivi.php. The NVD entry lists the vulnerability as a web input handling issue with attack vector over network and no authentication, causing partial...