Search vulnerabilities

Results 3

Export CSV
CVE-2012-6273

SQL injection vulnerability in BigAntSoft BigAnt IM Message Server allows remote attackers to execute arbitrary SQL commands via an SHU (aka search user) request.

CVSS 2.0 · 7.5 High EPSS 1.3% KEV · Not listed
Vendors
CVE-2012-6274

BigAntSoft BigAnt IM Message Server does not require authentication for file uploading, which allows remote attackers to create arbitrary files under AntServer\DocData\Public via unspecified vectors.

CVSS 2.0 · 5.0 Medium EPSS 46.9% KEV · Not listed
Vendors
CVE-2012-6275

Multiple stack-based buffer overflows in AntDS.exe in BigAntSoft BigAnt IM Message Server allow remote attackers to have an unspecified impact via (1) the filename header in an SCH request or (2) the userid component in a DUPF request.

CVSS 2.0 · 10.0 Critical EPSS 46.5% KEV · Not listed
Vendors