| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2009-2375 | 9.3 | Stack-based buffer overflow in Photo DVD Maker 8.02, and possibly earlier versions, allows remote attackers to execute arbitrary code via a long File_Name parameter in a .pdm file. NOTE: some of these details are obtained from third party informatio | 2018-10-10 19:39:00 | 2009-07-08 15:30:00 |
| CVE-2009-2359 | 7.5 | Multiple SQL injection vulnerabilities in TekRADIUS 3.0 allow context-dependent attackers to execute arbitrary SQL commands via (1) the GUI client, as demonstrated by input to the Browse Users text box in the Users tab; or (2) the command-line client | 2018-10-10 19:39:00 | 2009-07-07 23:30:00 |
| CVE-2009-2358 | 4.6 | TekRADIUS 3.0 uses BUILTIN\Users:R permissions for the TekRADIUS.ini file, which allows local users to obtain obfuscated database credentials by reading this file. | 2018-10-10 19:39:00 | 2009-07-07 23:30:00 |
| CVE-2009-2357 | 10.0 | The default configuration of TekRADIUS 3.0 uses the sa account to communicate with Microsoft SQL Server, which makes it easier for remote attackers to obtain privileged access to the database and the underlying Windows operating system. | 2018-10-10 19:39:00 | 2009-07-07 23:30:00 |
| CVE-2009-2356 | 9.3 | Multiple stack-based buffer overflows in the pgsqlQuery function in NullLogic Groupware 1.2.7, when PostgreSQL is used, might allow remote attackers to execute arbitrary code via input to the (1) POP3, (2) SMTP, or (3) web component that triggers a l | 2018-10-10 19:39:00 | 2009-07-07 23:30:00 |
| CVE-2009-2355 | 4.0 | The forum module in NullLogic Groupware 1.2.7 allows remote authenticated users to cause a denial of service (application crash) by specifying (1) an empty string or (2) a non-numeric string when selecting a forum, related to the fmessagelist functio | 2018-10-10 19:39:00 | 2009-07-07 23:30:00 |
| CVE-2009-2354 | 7.5 | SQL injection vulnerability in the auth_checkpass function in the login page in NullLogic Groupware 1.2.7 allows remote attackers to execute arbitrary SQL commands via the username parameter. | 2018-10-10 19:39:00 | 2009-07-07 23:30:00 |
| CVE-2009-2353 | 6.8 | encoder.php in eAccelerator allows remote attackers to execute arbitrary code by copying a local executable file to a location under the web root via the -o option, and then making a direct request to this file, related to upload of image files. | 2018-10-10 19:39:00 | 2009-07-07 23:30:00 |
| CVE-2009-2352 | 4.3 | Google Chrome 1.0.154.48 and earlier does not block javascript: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header or (2) specif | 2018-10-10 19:39:00 | 2009-07-07 23:30:00 |
| CVE-2009-2350 | 4.3 | Microsoft Internet Explorer 6.0.2900.2180 and earlier does not block javascript: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh hea | 2018-10-10 19:39:00 | 2009-07-07 23:30:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: