|
345621
|
- |
|
nskate
|
phortail
|
Cross-site scripting (XSS) vulnerability in poster.php in PHortail 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the (1) pseudo, (2) email, (3) ti, and (4) txt parameters.
|
CWE-79
Cross-site Scripting
|
CVE-2009-4888
|
2017-08-17 10:31 |
2010-06-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
345622
|
- |
|
jbmc-software
|
directadmin
|
CMD_DB in JBMC Software DirectAdmin before 1.334 allows remote authenticated users to gain privileges via shell metacharacters in the name parameter during a restore action.
|
CWE-20
Improper Input Validation
|
CVE-2009-1525
|
2017-08-17 10:30 |
2009-05-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
345623
|
- |
|
jbmc-software
|
directadmin
|
Cross-site scripting (XSS) vulnerability in CMD_REDIRECT in DirectAdmin 1.33.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the URI in a view=advanced request.
|
CWE-79
Cross-site Scripting
|
CVE-2009-2216
|
2017-08-17 10:30 |
2009-06-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
345624
|
- |
|
ibm
|
websphere_service_registry_and_repository
|
IBM WebSphere Service Registry and Repository (WSRR) 6.3.0 before FP2 does not have the intended configuration properties, which allows remote authenticated users to obtain unspecified data access vi…
|
CWE-16
Configuration
|
CVE-2009-2750
|
2017-08-17 10:30 |
2010-02-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
345625
|
- |
|
ibm
|
websphere_commerce
|
IBM WebSphere Commerce 7.0 uses the same cryptographic key for session attributes and merchant data encryption, which has unspecified impact and remote attack vectors.
|
CWE-310
Cryptographic Issues
|
CVE-2009-2751
|
2017-08-17 10:30 |
2010-02-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
345626
|
- |
|
ibm
|
websphere_commerce
|
IBM WebSphere Commerce 7.0 does not properly encrypt data in a database, which makes it easier for local users to obtain sensitive information by defeating cryptographic protection mechanisms.
|
CWE-310
Cryptographic Issues
|
CVE-2009-2752
|
2017-08-17 10:30 |
2010-02-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
345627
|
- |
|
softbiz
|
dating_script
|
SQL injection vulnerability in cat_products.php in SoftBiz Dating Script allows remote attackers to execute arbitrary SQL commands via the cid parameter. NOTE: this might overlap CVE-2006-3271.4.
|
CWE-89
SQL Injection
|
CVE-2009-2790
|
2017-08-17 10:30 |
2009-08-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
345628
|
- |
|
apple
|
airport_utility
|
AirPort Utility before 5.5.1 for Apple AirPort Base Station does not properly distribute MAC address ACLs to network extenders, which allows remote attackers to bypass intended access restrictions vi…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2009-2822
|
2017-08-17 10:30 |
2010-04-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
345629
|
- |
|
rpm
|
rpm
|
lib/fsm.c in RPM before 4.4.3 does not properly reset the metadata of an executable file during deletion of the file in an RPM package removal, which might allow local users to gain privileges by cre…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2005-4889
|
2017-08-17 10:29 |
2010-06-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
345630
|
- |
|
debian
|
dpkg
|
dpkg 1.9.21 does not properly reset the metadata of a file during replacement of the file in a package upgrade, which might allow local users to gain privileges by creating a hard link to a vulnerabl…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2004-2768
|
2017-08-17 10:29 |
2010-06-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
