261 matches found
SugarCRM x<5.5.0a and 5.2.0l cross site scripting Vulnerability
Exploit for unknown platform in category web applications =============================================================== SugarCRM x ;...
SugarCRM Cross Site Scripting
Class: Stored Cross Site Scripting XSS CVE: CVE-2010-0465 Remote: Yes Local: Yes Published: Jan 1, 2010 12:01AM Timeline: Submission to Mitre: January 29, 2010 Vendor Contact: February 18, 2010 Vendor Response: February 19, 2010 Patch Available: March 10, 2010 Credit: Jeromie Jackson CISSP, CISM...
CVE-2009-0465
The CVE-2009-0465 entry describes a vulnerability in Synactis ALL In-The-Box ActiveX 3, specifically the All_In_The_Box.AllBox ActiveX control (ALL_IN_THE_BOX.OCX). The SaveDoc method is exploitable to remotely create and overwrite arbitrary files by passing an argument that ends with a null char...
CVE-2009-0465
creationtimestamp| type| source ---|---|--- 2009-01-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7928...
CVE-2008-0465
The CVE-2008-0465 entry describes a directory traversal vulnerability in Seagull 0.6.3, specifically in the optimizer.php component. The root cause is improper handling of the files parameter, allowing an attacker to traverse directories using dot-dot (..) to read arbitrary files. The vulnerabili...
CentOS 3 : pam (CESA-2007:0465)
Updated pam packages that resolves several bugs and security flaws are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Pluggable Authentication Modules PAM provide a system whereby administrators ca...
CVE-2007-0465
CVE-2007-0465 describes a format-string vulnerability in Apple’s Installer (Mac OS X 10.4.8, Apple Installer 2.1.5). The flaw arises during parsing of package filenames that can contain format specifiers in (PKG, DISTZ, MPKG) files, enabling a user-assisted remote attacker to execute arbitrary co...
CVE-2006-0465
Cross-site scripting XSS vulnerability in risultatiricerca.php in active121 Site Manager allows remote attackers to inject arbitrary web script or HTML via the cerca parameter...
CVE-2006-0465
The vulnerability CVE-2006-0465 affects the active121 Site Manager, specifically in the resultados_ricerca.php component. The issue is a cross-site scripting (XSS) flaw exposed via the cerca parameter, allowing remote attackers to inject arbitrary web script or HTML. The connected documents confi...
CVE-2005-0465
CVE-2005-0465 concerns SGI IRIX gr_osview, a setuid-root utility. Local attackers can exploit a privilege-inheritance flaw by using gr_osview -s to open files without dropping privileges, potentially overwriting arbitrary files (e.g., /etc/shadow) when an attacker has a local account and an open ...
CVE-2004-0465
OpenConnect WebConnect (WebConnect 6.4.4, 6.5 and possibly earlier) is vulnerable to a read-only directory traversal in the jretest.html page. By sending a crafted request that abuses the WCP_USER parameter (using ..// sequences), an attacker can read INI-style files outside the webroot and view ...
CVE-2004-0465
Directory traversal vulnerability in jretest.html in WebConnect 6.5 and 6.4.4, and possibly earlier versions, allows remote attackers to read keys within arbitrary INI formatted files via "..//" sequences in the WCPUSER parameter...
CVE-2004-0465
Directory traversal vulnerability in jretest.html in WebConnect 6.5 and 6.4.4, and possibly earlier versions, allows remote attackers to read keys within arbitrary INI formatted files via "..//" sequences in the WCPUSER parameter...
CVE-2003-0465
...
CVE-2003-0465
The CVE-2003-0465 issue affects the Linux kernel (2.4/2.5) where strncpy does not pad with null bytes on architectures other than x86, potentially allowing information leaks. Red Hat’s RHSA-2004:188 and related advisories document this as a kernel vulnerability with fixes in updated kernel packag...
CVE-2002-0465
Directory traversal vulnerability in filemanager.asp for Hosting Controller 1.4.1 and earlier allows remote attackers to read and modify arbitrary files, and execute commands, via a .. dot dot in the OpenPath parameter...
CVE-2002-0465
Hosting Controller 1.4.1 and earlier are affected by CVE-2002-0465. A directory traversal flaw in filemanager.asp allows remote attackers to read/modify arbitrary files and execute commands via an open path parameter containing .. (dot dot). The issue is identified in the NVD/CVE records for this...
CVE-2000-0465
Affected software: Internet Explorer 4.x and 5.x. Vulnerability: Frame Domain Verification — IE does not properly verify the domain of a frame within a browser window. Root cause/summary: Inadequate domain verification enables a remote attacker to access client files via the frame. Impact: Confid...
CVE-2000-0465
Internet Explorer 4.x and 5.x does not properly verify the domain of a frame within a browser window, which allows a remote attacker to read client files via the frame, aka the "Frame Domain Verification" vulnerability...