Dr. Marian Ventuneac

2 exploits Active since Dec 2008

CVE-2011-1772 EXPLOITDB text WRITEUP

Apache Struts 2.x <2.2.3 - XSS

Multiple cross-site scripting (XSS) vulnerabilities in XWork in Apache Struts 2.x before 2.2.3, and OpenSymphony XWork in OpenSymphony WebWork, allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) an action name, (2) the action attribute of an s:submit element, or (3) the method attribute of an s:submit element.

View Code

CVE-2008-1094 EXPLOITDB text WRITEUP

Barracuda Spam Firewall <3.5.12.007 - SQL Injection

SQL injection vulnerability in index.cgi in the Account View page in Barracuda Spam Firewall (BSF) before 3.5.12.007 allows remote authenticated administrators to execute arbitrary SQL commands via a pattern_x parameter in a search_count_equals action, as demonstrated by the pattern_0 parameter.

View Code