CVE-2008-2647

SQL injection vulnerability in admin/journalchangemask.inc.php in meBiblio 0.4.7 allows remote attackers to execute arbitrary SQL commands via the JID parameter...

CVE-2008-2648

Unrestricted file upload vulnerability in upload/uploader.html in meBiblio 0.4.7 allows remote attackers to execute arbitrary code by uploading a .php file, then accessing it via a direct request to the files/ directory...

CVE-2008-2646

CVE-2008-2646 affects meBiblio 0.4.7 and involves multiple cross-site scripting (XSS) vulnerabilities. The issue arises in the application when handling user-supplied input passed to specific parameters: (1) sql parameter to dbadd.inc.php, (2) InsertJournal parameter to add_journal_mask.inc.php, ...

meBiblio 0.4.7 (SQL/Upload/XSS) Multiple Remote Vulnerabilities

No description provided by source. ======================================================================================== meBiblio 0.4.7 Remote SQL Injection/ Arbitrary File Upload Exploit / XSS Vulnerability ======================================================================================...

mebiblio 0.4.7 - SQL Injection Arbitrary File Upload Cross-Site Scripting

mebiblio 0.4.7 - SQL Injection Arbitrary File Upload Cross-Site Scripting ======================================================================================== meBiblio 0.4.7 Remote SQL Injection/ Arbitrary File Upload Exploit / XSS Vulnerability...

mebiblio 0.4.7 - SQL Injection / Arbitrary File Upload / Cross-Site Scripting

======================================================================================== meBiblio 0.4.7 Remote SQL Injection/ Arbitrary File Upload Exploit / XSS Vulnerability ========================================================================================...

FireGPG PGP Key Issuer Name HTML Injection Vulnerability

FireGPG is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML or JavaScript code could run in the context of the website that the application is triggered from,...

PT-2007-3439 · Openconcept · Openconcept Back-End Cms

Name of the Vulnerable Software and Affected Versions: OpenConcept Back-End CMS version 0.4.7 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the includes path parameter to various PHP files, including "click.php" and "pollcollector.php" in the htdocs...

security flaw

The cryptgensalt functions for BSDI-style extended DES-based and FreeBSD-sytle MD5-based password hashes in cryptblowfish 0.4.7 and earlier do not evenly and randomly distribute salts, which makes it easier for attackers to guess passwords from a stolen password file due to the increased number o...

CVE-2006-1999

The multiplayer menu in OpenTTD 0.4.7 allows remote attackers to cause a denial of service via a UDP packet with an incorrect size, which causes the client to return to the main menu...

CVE-2006-1998

OpenTTD 0.4.7 and earlier is vulnerable to a local denial-of-service due to a flaw in error handling for command packets; sending a large invalid error number can trigger an application exit. The issue affects OpenTTD server components when handling certain errors, allowing a local attacker to ca...