Show filters
53 Total Results
Displaying 41-50 of 53
Sort by:
Attacker Value
Unknown
CVE-2009-4687
Disclosure Date: March 10, 2010 (last updated October 04, 2023)
SQL injection vulnerability in silentum_guestbook.php in Silentum Guestbook 2.0.2 allows remote attackers to execute arbitrary SQL commands via the messageid parameter.
0
Attacker Value
Unknown
CVE-2008-7008
Disclosure Date: August 19, 2009 (last updated October 04, 2023)
HyperStop Web Host Directory 1.2 allows remote attackers to bypass authentication and download a database backup via a direct request to admin/backup/db.
0
Attacker Value
Unknown
CVE-2009-2299
Disclosure Date: July 02, 2009 (last updated October 04, 2023)
The Artofdefence Hyperguard Web Application Firewall (WAF) module before 2.5.5-11635, 3.0 before 3.0.3-11636, and 3.1 before 3.1.1-11637, a module for the Apache HTTP Server, allows remote attackers to cause a denial of service (memory consumption) via an HTTP request with a large Content-Length value but no POST data.
0
Attacker Value
Unknown
CVE-2008-6763
Disclosure Date: April 28, 2009 (last updated October 04, 2023)
login2.php in Silentum LoginSys 1.0.0 allows remote attackers to bypass authentication and obtain access to an arbitrary account by setting the logged_in cookie to that account's username.
0
Attacker Value
Unknown
CVE-2008-6764
Disclosure Date: April 28, 2009 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in login.php in Silentum LoginSys 1.0.0 allows remote attackers to inject arbitrary web script or HTML via the message parameter.
0
Attacker Value
Unknown
CVE-2007-1192
Disclosure Date: March 02, 2007 (last updated October 04, 2023)
Thomas R. Pasawicz HyperBook Guestbook 1.30 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download an admin password hash via a direct request for data/gbconfiguration.dat.
0
Attacker Value
Unknown
CVE-2006-6649
Disclosure Date: December 20, 2006 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in display.php in HyperVM 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via an encoded frm_action parameter. NOTE: the vendor disputes this issue, but it is not certain whether the dispute is about the severity of the issue, or its existence.
0
Attacker Value
Unknown
CVE-2006-5774
Disclosure Date: November 06, 2006 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in Hyper NIKKI System before 2.19.9 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
0
Attacker Value
Unknown
CVE-2006-3671
Disclosure Date: July 18, 2006 (last updated October 04, 2023)
Cross-site request forgery (CSRF) vulnerability in the communicate function in estmaster.c for Hyper Estraier before 1.3.3 allows remote attackers to perform unauthorized actions as other users via unknown vectors.
0
Attacker Value
Unknown
CVE-2005-3421
Disclosure Date: November 01, 2005 (last updated February 22, 2025)
estcmd in Hyper Estraier 1.0.1 on Windows systems allows remote attackers to read unauthorized files via a crafted search request for a filename that contains Unicode characters.
0
