| OSVDB ID | Disclosure Date | Title |
|
41305
Description:
Unknown / Incomplete
|
2006-06-08
|
802.11 Protocol MAC / PHY Layer Multiple Malformed Frame DoS
|
|
21269
Description:
88Scripts contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the index.php script not properly sanitizing user-supplied input to the 'm' variable. This may allow an attacker to inject or manipulate SQL queries in the back-end database.
|
2005-11-29
|
88Scripts Event Calendar index.php m Parameter SQL Injection
|
|
36706
Description:
(Description Provided by CVE) : Cross-site scripting (XSS) vulnerability in the 8e6 R3000 Enterprise Filter before 2.0.05 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this may be the same as CVE-2007-2970.
|
2007-05-29
|
8e6 R3000 Internet Filter cgi/block.cgi Multiple Parameter XSS
|
|
47517
Description:
(Description Provided by CVE) : 8e6 R3000 Internet Filter 2.0.12.10 allows remote attackers to bypass intended restrictions via an extra HTTP Host header with additional leading text placed before the real Host header.
|
2008-08-05
|
8e6 R3000 Internet Filter Crafted HTTP Host Header Security Bypass
|
|
40513
Description:
(Description Provided by CVE) : 8e6 R3000 Internet Filter 2.0.05.33, and other versions before 2.0.11, allows remote attackers to bypass intended restrictions via a fragmented HTTP request.
|
2008-01-15
|
8e6 Technologies R3000 Internet Filter Fragmented HTTP Request Remote Security Bypass
|
|
61227
Description:
Unknown / Incomplete
|
2009-12-20
|
8pixel.net Blog App_Data/sb.mdb Direct Request Database Disclosure
|