| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2002-1631 | 7.5 | SQL injection vulnerability in the query.xsql sample page in Oracle 9i Application Server (9iAS) allows remote attackers to execute arbitrary code via the sql parameter. | 2008-09-05 20:31:00 | 2002-12-31 05:00:00 |
| CVE-2002-1641 | 10.0 | Multiple buffer overflows in Oracle Web Cache for Oracle 9i Application Server (9iAS) allow remote attackers to execute arbitrary code via unknown vectors. | 2008-09-05 20:31:00 | 2002-05-27 04:00:00 |
| CVE-2002-1621 | 10.0 | Buffer overflow in the file_comp function in rcp for IBM AIX 4.3.x and 5.1 allows remote attackers to execute arbitrary code. | 2008-09-05 20:31:00 | 2002-04-22 04:00:00 |
| CVE-2002-1591 | 7.5 | AOL Instant Messenger (AIM) 4.7.2480 adds free.aol.com to the Trusted Sites Zone in Internet Explorer without user approval, which could allow code from free.aol.com to bypass intended access restrictions. | 2008-09-05 20:31:00 | 2002-04-08 04:00:00 |
| CVE-2002-1582 | 10.0 | compose.cgi in Mailreader.com 2.3.30 and 2.3.31, when using Sendmail as the Mail Transfer Agent, allows remote attackers to execute arbitrary commands via shell metacharacters in the RealEmail configuration variable, which is used to call Sendmail in | 2008-09-05 20:30:00 | 2004-12-06 05:00:00 |
| CVE-2002-1583 | 7.2 | Buffer overflow in sqllib/security/db2ckpw for IBM DB2 Universal Database 6.0 and 7.0 allows local users to execute arbitrary code via a long username that is read from a file descriptor argument. | 2008-09-05 20:30:00 | 2004-09-28 04:00:00 |
| CVE-2002-1462 | 5.0 | details2.php in OrganicPHP PHP-affiliate 1.0, and possibly later versions, allows remote attackers to modify information of other users by modifying certain hidden form fields. | 2008-09-05 20:30:00 | 2003-06-09 04:00:00 |
| CVE-2002-1461 | 7.5 | Web Shop Manager 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the search box. | 2008-09-05 20:30:00 | 2003-06-09 04:00:00 |
| CVE-2002-1460 | 5.0 | L-Forum 2.40 and earlier does not properly verify whether a file was uploaded or if the associated variables were set by POST (attachment, attachment_name, attachment_size and attachment_type), which allows remote attackers to read arbitrary files. | 2008-09-05 20:30:00 | 2003-06-09 04:00:00 |
| CVE-2002-1459 | 7.5 | Cross-site scripting vulnerability in L-Forum 2.40 and earlier, when the "Enable HTML in messages" option is off, allows remote attackers to insert arbitrary script or HTML via message fields including (1) From, (2) E-Mail, and (3) Subject. | 2008-09-05 20:30:00 | 2003-06-09 04:00:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40089
Zapisa po stranici: