|
345741
|
- |
|
softbiz
|
dating_script
|
SQL injection vulnerability in cat_products.php in SoftBiz Dating Script allows remote attackers to execute arbitrary SQL commands via the cid parameter. NOTE: this might overlap CVE-2006-3271.4.
|
CWE-89
SQL Injection
|
CVE-2009-2790
|
2017-08-17 10:30 |
2009-08-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
345742
|
- |
|
apple
|
airport_utility
|
AirPort Utility before 5.5.1 for Apple AirPort Base Station does not properly distribute MAC address ACLs to network extenders, which allows remote attackers to bypass intended access restrictions vi…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2009-2822
|
2017-08-17 10:30 |
2010-04-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
345743
|
- |
|
rpm
|
rpm
|
lib/fsm.c in RPM before 4.4.3 does not properly reset the metadata of an executable file during deletion of the file in an RPM package removal, which might allow local users to gain privileges by cre…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2005-4889
|
2017-08-17 10:29 |
2010-06-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
345744
|
- |
|
debian
|
dpkg
|
dpkg 1.9.21 does not properly reset the metadata of a file during replacement of the file in a package upgrade, which might allow local users to gain privileges by creating a hard link to a vulnerabl…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2004-2768
|
2017-08-17 10:29 |
2010-06-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
345745
|
- |
|
realnetworks
|
realone_enterprise_desktop realone_player
|
Real Networks RealOne Enterprise Desktop 6.0.11.774, RealOne Player 2.0, and RealOne Player 6.0.11.818 through RealOne Player 6.0.11.853 allows remote attackers to execute arbitrary script in the loc…
|
NVD-CWE-Other
|
CVE-2003-1509
|
2017-08-17 10:29 |
2003-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
345746
|
- |
|
sun
|
one_web_server
|
Sun ONE (aka iPlanet) Web Server 4.1 through SP12 and 6.0 through SP5, when DNS resolution is enabled for client IP addresses, allows remote attackers to inject arbitrary text into log files, and con…
|
CWE-79
Cross-site Scripting
|
CVE-2003-1577
|
2017-08-17 10:29 |
2010-02-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
345747
|
- |
|
sun
|
one_web_server
|
Sun ONE (aka iPlanet) Web Server 4.1 through SP12 and 6.0 through SP5, when DNS resolution is enabled for client IP addresses, allows remote attackers to hide HTTP requests from the log-preview funct…
|
NVD-CWE-Other
|
CVE-2003-1578
|
2017-08-17 10:29 |
2010-02-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
345748
|
- |
|
webtrends
|
webtrends_log_analyzer
|
Cross-site scripting (XSS) vulnerability in WebTrends allows remote attackers to inject arbitrary web script or HTML via a crafted client domain name, related to an "Inverse Lookup Log Corruption (IL…
|
CWE-79
Cross-site Scripting
|
CVE-2003-1583
|
2017-08-17 10:29 |
2010-02-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
345749
|
- |
|
surfstats
|
surfstats
|
Cross-site scripting (XSS) vulnerability in SurfStats allows remote attackers to inject arbitrary web script or HTML via a crafted client domain name, related to an "Inverse Lookup Log Corruption (IL…
|
CWE-79
Cross-site Scripting
|
CVE-2003-1584
|
2017-08-17 10:29 |
2010-02-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
345750
|
- |
|
alentum
|
weblog_expert
|
Cross-site scripting (XSS) vulnerability in WebLogExpert allows remote attackers to inject arbitrary web script or HTML via a crafted client domain name, related to an "Inverse Lookup Log Corruption …
|
CWE-79
Cross-site Scripting
|
CVE-2003-1585
|
2017-08-17 10:29 |
2010-02-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|