Show filters
129 Total Results
Displaying 111-120 of 129
Sort by:
Attacker Value
Unknown
CVE-2007-3301
Disclosure Date: June 20, 2007 (last updated October 04, 2023)
SQL injection vulnerability in forum/include/error/autherror.cfm in FuseTalk allows remote attackers to execute arbitrary SQL commands via the errorcode parameter. NOTE: a patch may have been released privately between April and June 2007. NOTE: this issue may overlap CVE-2007-3273.
0
Attacker Value
Unknown
CVE-2007-3273
Disclosure Date: June 19, 2007 (last updated October 04, 2023)
SQL injection vulnerability in index.cfm in FuseTalk 2.0 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
0
Attacker Value
Unknown
CVE-2006-0242
Disclosure Date: January 18, 2006 (last updated February 22, 2025)
Cross-site scripting vulnerability in index.php in PHP Fusebox 4.0.6 allows remote attackers to inject arbitrary web script or HTML via the fuseaction parameter.
0
Attacker Value
Unknown
CVE-2005-3971
Disclosure Date: December 03, 2005 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in the login form in Citrix MetaFrame Secure Access Manager 2.0 through 2.2 and NFuse Elite 1.0 allows remote attackers to inject arbitrary web script or HTML via the username field.
0
Attacker Value
Unknown
CVE-2005-3531
Disclosure Date: November 23, 2005 (last updated February 22, 2025)
fusermount in FUSE before 2.4.1, if installed setuid root, allows local users to corrupt /etc/mtab and possibly modify mount options by performing a mount over a directory whose name contains certain special characters.
0
Attacker Value
Unknown
CVE-2005-2481
Disclosure Date: August 05, 2005 (last updated February 22, 2025)
ColdFusion Fusebox 4.1.0 allows remote attackers to obtain sensitive information via an invalid fuseaction parameter, which leaks the full server path in an error message, as demonstrated using the "?" (question mark) character.
0
Attacker Value
Unknown
CVE-2005-2480
Disclosure Date: August 05, 2005 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in ColdFusion Fusebox 4.1.0 allows remote attackers to inject arbitrary web script or HTML via the fuseaction parameter, which is not quoted in an error page, as demonstrated using index.cfm.
0
Attacker Value
Unknown
CVE-2005-1858
Disclosure Date: June 03, 2005 (last updated February 22, 2025)
FUSE 2.x before 2.3.0 does not properly clear previously used memory from unfilled pages when the filesystem returns a short byte count to a read request, which may allow local users to obtain sensitive information.
0
Attacker Value
Unknown
CVE-2004-1995
Disclosure Date: December 31, 2004 (last updated February 22, 2025)
Cross-Site Request Forgery (CSRF) vulnerability in FuseTalk 2.0 allows remote attackers to create arbitrary accounts via a link to adduser.cfm.
0
Attacker Value
Unknown
CVE-2004-1594
Disclosure Date: October 13, 2004 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in FuseTalk 4.0 allows remote attackers to execute arbitrary web script via an img src tag.
0
