Show filters
51 Total Results
Displaying 31-40 of 51
Sort by:
Attacker Value
Unknown
CVE-2011-4054
Disclosure Date: December 08, 2011 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in login.fcc in CA SiteMinder R6 SP6 before CR7 and R12 SP3 before CR8 allows remote attackers to inject arbitrary web script or HTML via the postpreservationdata parameter.
0
Attacker Value
Unknown
CVE-2011-1718
Disclosure Date: April 27, 2011 (last updated October 04, 2023)
The Web Agents component in CA SiteMinder R6 before SP6 CR2 and R12 before SP3 CR2 does not properly handle multi-line headers, which allows remote authenticated users to conduct impersonation attacks and gain privileges via crafted data.
0
Attacker Value
Unknown
CVE-2010-4615
Disclosure Date: December 29, 2010 (last updated October 04, 2023)
Multiple SQL injection vulnerabilities in Oto Galeri Sistemi 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) arac parameter to carsdetail.asp and the (2) marka parameter to twohandscars.asp.
0
Attacker Value
Unknown
CVE-2009-3360
Disclosure Date: September 24, 2009 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in Datemill 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) return parameter to photo_view.php, and st parameter to (2) photo_search.php and (3) search.php.
0
Attacker Value
Unknown
CVE-2009-2705
Disclosure Date: August 11, 2009 (last updated October 04, 2023)
CA SiteMinder allows remote attackers to bypass cross-site scripting (XSS) protections for J2EE applications via a request containing non-canonical, "overlong Unicode" in place of blacklisted characters.
0
Attacker Value
Unknown
CVE-2008-5707
Disclosure Date: December 24, 2008 (last updated October 04, 2023)
SQL injection vulnerability in urunler.asp in Iltaweb Alisveris Sistemi allows remote attackers to execute arbitrary SQL commands via the catno parameter.
0
Attacker Value
Unknown
CVE-2008-5156
Disclosure Date: November 18, 2008 (last updated October 04, 2023)
si_mkbootserver in systemimager-server 3.6.3 allows local users to overwrite arbitrary files via a symlink attack on a (1) /tmp/*.inetd.conf or (2) /tmp/pxe.conf.*.tmp temporary file.
0
Attacker Value
Unknown
CVE-2007-5923
Disclosure Date: November 10, 2007 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in forms/smpwservices.fcc in CA (formerly Computer Associates) eTrust SiteMinder Agent allows remote attackers to inject arbitrary web script or HTML via the SMAUTHREASON parameter, a different vector than CVE-2005-2204.
0
Attacker Value
Unknown
CVE-2007-4114
Disclosure Date: July 31, 2007 (last updated October 04, 2023)
Multiple SQL injection vulnerabilities in unuttum.asp in SuskunDuygular Uyelik Sistemi 1.2 allow remote attackers to execute arbitrary SQL commands via the (1) kadi or (2) email parameter. NOTE: some of these details are obtained from third party information.
0
Attacker Value
Unknown
CVE-2007-3178
Disclosure Date: June 11, 2007 (last updated October 04, 2023)
Multiple SQL injection vulnerabilities in Zindizayn Okul Web Sistemi 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) id or (2) pass parameter to (a) mezungiris.asp or (b) ogretmenkontrol.asp.
0
