Svi - CERT CVE

Rezultati pretraživanja za 'Proizvođač: zarafa'

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2006-6687 4.3 Cross-site scripting (XSS) vulnerability in Web Automated Perl Portal (WebAPP) 0.9.9.4, and 0.9.9.3.4 Network Edition (NE) (aka WebAPP.NET), allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: The provenance 2011-07-25 04:00:00
CVE-2007-1832 5.0 web-app.org WebAPP before 0.9.9.6 allows remote authenticated users to upload certain files (1) via a crafted filename or (2) by "using percent encoding in forms." 2011-03-08 02:52:00
CVE-2007-1831 6.0 web-app.org WebAPP before 0.9.9.6 allows remote authenticated users to open files and write "wrong data" via a crafted QUERY_STRING. 2011-03-08 02:52:00
CVE-2007-1828 3.5 Multiple cross-site scripting (XSS) vulnerabilities in web-app.org WebAPP before 0.9.9.6 allow remote authenticated users to inject arbitrary web script or HTML via (1) the QUERY_STRING corresponding to drop downs or (2) various forms. 2011-03-08 02:52:00
CVE-2007-1827 6.0 Multiple unspecified vulnerabilities in form input validation in web-app.org WebAPP before 0.9.9.6 allow remote authenticated users to corrupt data files, gain access to private files, and execute arbitrary code via "certain characters." 2011-03-08 02:52:00
CVE-2007-1188 7.5 WebAPP before 0.9.9.5 allows remote attackers to submit Search form input that is not checked for (1) composition or (2) length, which has unknown impact, possibly related to "search form hijacking". 2011-03-08 02:51:00
CVE-2007-1187 5.5 WebAPP before 0.9.9.5 allows remote authenticated users, without admin privileges, to obtain sensitive information via (1) the Forum Archive feature and (2) Recent Searches. 2011-03-08 02:51:00
CVE-2007-1186 5.0 WebAPP before 0.9.9.5 does not "censor" the Latest Member real name, which has unknown impact. 2011-03-08 02:51:00
CVE-2007-1185 5.0 The (1) Search, (2) Edit Profile, (3) Recommend, and (4) User Approval forms in WebAPP before 0.9.9.5 use hidden inputs, which has unknown impact and remote attack vectors. 2011-03-08 02:51:00
CVE-2007-1184 5.0 The default configuration of WebAPP before 0.9.9.5 has a CAPTCHA setting of "no," which makes it easier for automated programs to submit false data. 2011-03-08 02:51:00
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/6
Zapisa po stranici: