| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2002-2046 | 7.5 | x_news.php in X-News (x_news) 1.1 and earlier allows remote attackers to gain administrative privileges by stealing and replaying the md5_password cookie. | 2008-09-05 20:32:00 | 2002-12-31 05:00:00 |
| CVE-2002-2044 | 4.3 | Cross-site scripting (XSS) vulnerability in x_stat_admin.php in x-stat 2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via a parameter to the phpinfo action. | 2008-09-05 20:32:00 | 2002-12-31 05:00:00 |
| CVE-2002-2043 | 7.5 | SQL injection vulnerability in the LDAP and MySQL authentication patch for Cyrus SASL 1.5.24 and 1.5.27 allows remote attackers to execute arbitrary SQL commands and log in as arbitrary POP mail users via the password. | 2008-09-05 20:32:00 | 2002-12-31 05:00:00 |
| CVE-2002-2042 | 7.2 | ptrace in the QNX realtime operating system (RTOS) 4.25 and 6.1.0 allows programs to attach to privileged processes, which could allow local users to execute arbitrary code by modifying running processes. | 2008-09-05 20:32:00 | 2002-12-31 05:00:00 |
| CVE-2002-2040 | 7.2 | The (1) phrafx and (2) phgrafx-startup programs in QNX realtime operating system (RTOS) 4.25 and 6.1.0 do not properly drop privileges before executing the system command, which allows local users to execute arbitrary commands by modifying the PATH e | 2008-09-05 20:32:00 | 2002-12-31 05:00:00 |
| CVE-2002-2038 | 3.6 | Next Generation POSIX Threading (NGPT) 1.9.0 uses a filesystem-based shared memory entry, which allows local users to cause a denial of service or in threaded processes or spoof files via unknown methods. | 2008-09-05 20:32:00 | 2002-12-31 05:00:00 |
| CVE-2002-2037 | 5.0 | The Cisco Media Gateway Controller (MGC) in (1) SC2200 7.4 and earlier, (2) VSC3000 9.1 and earlier, (3) PGW 2200 9.1 and earlier, (4) Billing and Management Server (BAMS) and (5) Voice Services Provisioning Tool (VSPT) runs on default installations | 2008-09-05 20:32:00 | 2002-12-31 05:00:00 |
| CVE-2002-2036 | 7.5 | Sun Ray Server Software (SRSS) 1.3, when Non-Smartcard Mobility (NSCM) is enabled, allows remote attackers to login as another user by running dtlogin from a system that supports the XDMCP client. | 2008-09-05 20:32:00 | 2002-12-31 05:00:00 |
| CVE-2002-2035 | 7.5 | SQL injection vulnerability in RealityScape MyLogin 2000 1.0.0 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) Username or (2) Password in the login form. | 2008-09-05 20:32:00 | 2002-12-31 05:00:00 |
| CVE-2002-2034 | 7.5 | The Email Sanitizer before 1.133 for Procmail allows remote attackers to bypass the mail filter and execute arbitrary code via crafted recursive multipart MIME attachments. | 2008-09-05 20:32:00 | 2002-12-31 05:00:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40089
Zapisa po stranici: