Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown

CVE-2015-4714

Disclosure Date: June 22, 2015 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in the DreamBox DM500-S allows remote attackers to inject arbitrary web script or HTML via the mode parameter to /body.
0
0
Attacker Value
Unknown

CVE-2012-1025

Disclosure Date: February 08, 2012 (last updated October 04, 2023)
Absolute path traversal vulnerability in file in Enigma2 Webinterface 1.6.0 through 1.6.8, 1.6rc3, and 1.7.0 allows remote attackers to read arbitrary files via a full pathname in the file parameter.
0
0
Attacker Value
Unknown

CVE-2012-1024

Disclosure Date: February 08, 2012 (last updated October 04, 2023)
Directory traversal vulnerability in file in Enigma2 Webinterface 1.5rc1 and 1.5beta4 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.
0
0
Attacker Value
Unknown

CVE-2011-4716

Disclosure Date: December 08, 2011 (last updated October 04, 2023)
Directory traversal vulnerability in file in DreamBox DM800 1.6rc3, 1.5rc1, and earlier allows remote attackers to read arbitrary files via the file parameter.
0
0