Show filters
87 Total Results
Displaying 81-87 of 87
Sort by:
Attacker Value
Unknown
CVE-2006-0375
Disclosure Date: January 22, 2006 (last updated February 22, 2025)
Advantage Century Telecommunication (ACT) P202S IP Phone 1.01.21 running firmware 1.1.21 on VxWorks uses a hardcoded Network Time Protocol (NTP) server in Taiwan, which could allow remote attackers to provide false time information, block access to time information, or conduct other attacks.
0
Attacker Value
Unknown
CVE-2005-1412
Disclosure Date: May 03, 2005 (last updated February 22, 2025)
SQL injection vulnerability in verify.asp for Ecomm Professional Guestbook 3.x allows remote attackers to execute arbitrary SQL commands via the AdminPWD parameter.
0
Attacker Value
Unknown
CVE-2005-1221
Disclosure Date: May 02, 2005 (last updated February 22, 2025)
SQL injection vulnerability in login.asp for Ecommerce-Carts EcommPro 3.0 allows remote attackers to execute arbitrary SQL commands via the password field.
0
Attacker Value
Unknown
CVE-2004-2172
Disclosure Date: December 31, 2004 (last updated February 22, 2025)
EarlyImpact ProductCart uses a weak encryption scheme to encrypt passwords, which allows remote attackers to obtain the password via a chosen plaintext attack.
0
Attacker Value
Unknown
CVE-2004-0301
Disclosure Date: November 23, 2004 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in more.php for Online Store Kit 3.0 allows remote attackers to inject arbitrary HTML via the id parameter.
0
Attacker Value
Unknown
CVE-2004-0300
Disclosure Date: November 23, 2004 (last updated February 22, 2025)
SQL injection vulnerability in Online Store Kit 3.0 allows remote attackers to inject arbitrary SQL and gain unauthorized access via (1) the cat parameter in shop.php, (2) the id parameter in more.php, (3) the cat_manufacturer parameter in shop_by_brand.php, or (4) the id parameter in listing.php.
0
Attacker Value
Unknown
CVE-2000-0561
Disclosure Date: June 19, 2000 (last updated February 22, 2025)
Buffer overflow in WebBBS 1.15 allows remote attackers to execute arbitrary commands via a long HTTP GET request.
0
