|
263971
|
- |
|
sun
|
ray_server_software
|
Unspecified vulnerability in Sun Ray Kiosk Mode 4.0 allows local and remote authenticated Sun Ray administrators to gain root privileges via unknown vectors related to utconfig.
|
NVD-CWE-noinfo
|
CVE-2008-2112
|
2017-08-8 10:30 |
2008-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
263972
|
- |
|
sun
|
java_system_application_server
java_system_web_server
|
Unspecified vulnerability in Sun Java System Application Server 7 2004Q2 before Update 6, Web Server 6.1 before SP8, and Web Server 7.0 before Update 1 allows remote attackers to obtain source code o…
|
CWE-200
Information Exposure
|
CVE-2008-2120
|
2017-08-8 10:30 |
2008-05-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
263973
|
- |
|
sap
|
internet_transaction_server
|
Cross-site scripting (XSS) vulnerability in WGate in SAP Internet Transaction Server (ITS) 6.20 allows remote attackers to inject arbitrary web script or HTML via (1) a "<>" sequence in the ~service …
|
CWE-79
Cross-site Scripting
|
CVE-2008-2123
|
2017-08-8 10:30 |
2008-05-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
263974
|
- |
|
tux_cms
|
tux_cms
|
Multiple cross-site scripting (XSS) vulnerabilities in Tux CMS 0.1 allow remote attackers to inject arbitrary web script or HTML via the (1) q parameter to index.php and the (2) returnURL parameter t…
|
CWE-79
Cross-site Scripting
|
CVE-2008-2126
|
2017-08-8 10:30 |
2008-05-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
263975
|
- |
|
igaming
|
cms
|
SQL injection vulnerability in poll_vote.php in iGaming CMS 1.5 allows remote attackers to execute arbitrary SQL commands via the id parameter.
|
CWE-89
SQL Injection
|
CVE-2008-2130
|
2017-08-8 10:30 |
2008-05-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
263976
|
- |
|
tru-zone
|
nukeet
|
Cross-site scripting (XSS) vulnerability in the Journal module in Tru-Zone Nuke ET 3.x allows remote attackers to inject arbitrary web script or HTML via the title parameter in a new entry, as demons…
|
CWE-79
Cross-site Scripting
|
CVE-2008-2133
|
2017-08-8 10:30 |
2008-05-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
263977
|
- |
|
tru-zone
|
nukeet
|
The Journal module in Tru-Zone Nuke ET 3.x allows remote attackers to obtain access to arbitrary user accounts, and alter or delete data, via a modified username in an unspecified cookie.
|
CWE-20
Improper Input Validation
|
CVE-2008-2134
|
2017-08-8 10:30 |
2008-05-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
263978
|
- |
|
rpath
|
appliance_platform_agent
|
The rootpw plugin in rPath Appliance Platform Agent 2 and 3 does not re-validate requests from a browser with a valid administrator session, including requests to change the password, which makes it …
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2008-2139
|
2017-08-8 10:30 |
2008-05-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
263979
|
- |
|
rpath
|
appliance_platform_agent
|
Cross-site request forgery (CSRF) vulnerability in the rootpw plugin in rPath Appliance Platform Agent 2 and 3 allows remote attackers to reset the root password as the administrator via a crafted UR…
|
CWE-352
Origin Validation Error
|
CVE-2008-2140
|
2017-08-8 10:30 |
2008-05-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
263980
|
- |
|
microsoft
|
outlook_web_access
|
Unspecified versions of Microsoft Outlook Web Access (OWA) use the Cache-Control: no-cache HTTP directive instead of no-store, which might cause web browsers that follow RFC-2616 to cache sensitive i…
|
NVD-CWE-Other
|
CVE-2008-2143
|
2017-08-8 10:30 |
2008-05-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
