Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown

CVE-2012-2633

Disclosure Date: June 15, 2012 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in wassup.php in the WassUp plugin before 1.8.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header.
0
0
Attacker Value
Unknown

CVE-2004-0451

Disclosure Date: December 06, 2004 (last updated February 22, 2025)
Multiple format string vulnerabilities in the (1) logquit, (2) logerr, or (3) loginfo functions in Software Upgrade Protocol (SUP) allows remote attackers to execute arbitrary code via format string specifiers in messages that are logged by syslog.
0
0
Attacker Value
Unknown

CVE-2003-0606

Disclosure Date: August 27, 2003 (last updated February 22, 2025)
sup 1.8 and earlier does not properly create temporary files, which allows local users to overwrite arbitrary files.
0
0