Show filters
461 Total Results
Displaying 351-360 of 461
Sort by:
Attacker Value
Unknown
CVE-2008-5709
Disclosure Date: December 24, 2008 (last updated October 04, 2023)
Multiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager (CM) 3.1 before 3.1.4 SP2, 4.0 before 4.0.3 SP1, and 5.0 before 5.0 SP3 allow remote authenticated users to execute arbitrary code via unknown attack vectors in the (1) Set Static Routes and (2) Backup History components.
0
Attacker Value
Unknown
CVE-2008-5081
Disclosure Date: December 17, 2008 (last updated October 04, 2023)
The originates_from_local_legacy_unicast_socket function (avahi-core/server.c) in avahi-daemon in Avahi before 0.6.24 allows remote attackers to cause a denial of service (crash) via a crafted mDNS packet with a source port of 0, which triggers an assertion failure.
0
Attacker Value
Unknown
CVE-2008-5523
Disclosure Date: December 12, 2008 (last updated October 04, 2023)
avast! antivirus 4.8.1281.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.
0
Attacker Value
Unknown
CVE-2008-4949
Disclosure Date: November 05, 2008 (last updated October 04, 2023)
dist 3.5 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/cil#####, (b) /tmp/pdo#####, and (c) /tmp/pdn##### temporary files, related to the (1) patcil and (2) patdiff scripts.
0
Attacker Value
Unknown
CVE-2008-4375
Disclosure Date: October 01, 2008 (last updated October 04, 2023)
SQL injection vulnerability in viewprofile.php in Availscript Classmate Script allows remote attackers to execute arbitrary SQL commands via the p parameter.
0
Attacker Value
Unknown
CVE-2008-4371
Disclosure Date: October 01, 2008 (last updated October 04, 2023)
SQL injection vulnerability in articles.php in AvailScript Article Script allows remote attackers to execute arbitrary SQL commands via the aIDS parameter.
0
Attacker Value
Unknown
CVE-2008-4370
Disclosure Date: October 01, 2008 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in Availscript Photo Album allow remote attackers to inject arbitrary web script or HTML via the (1) sid parameter to pics.php and the (2) a parameter to view.php.
0
Attacker Value
Unknown
CVE-2008-4369
Disclosure Date: October 01, 2008 (last updated October 04, 2023)
SQL injection vulnerability in pics.php in Availscript Photo Album allows remote attackers to execute arbitrary SQL commands via the sid parameter.
0
Attacker Value
Unknown
CVE-2008-4372
Disclosure Date: October 01, 2008 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in articles.php in AvailScript Article Script allows remote attackers to inject arbitrary web script or HTML via the aIDS parameter.
0
Attacker Value
Unknown
CVE-2008-4373
Disclosure Date: October 01, 2008 (last updated October 04, 2023)
SQL injection vulnerability in job_seeker/applynow.php in AvailScript Job Portal Script allows remote attackers to execute arbitrary SQL commands via the jid parameter.
0
