93 matches found
CVE-2007-0511
CVE-2007-0511 concerns phpXMLDOM (phpXD)
vBulletin misc.php Template Name Arbitrary Code Execution
This module exploits an arbitrary PHP code execution flaw in the vBulletin web forum software. This vulnerability is only present when the "Add Template Name in HTML Comments" option is enabled. All versions of vBulletin prior to 3.0.7 are affected. This module requires Metasploit:...
CVE-2006-0511
Blackboard Academic Suite 6.0 and earlier is affected by a session handling weakness: when a user is idle and then de-authenticates, the system may not properly clear session information, allowing a subsequent user to log in as the previous user and gain privileges. The issue is disputed by the v...
Simple PHP Blog: Multiple XSS Vulnerabilities
=========================================================== Simple PHP Blog: Multiple XSS Vulnerabilities =========================================================== Technical University of Vienna Security Advisory TUVSA-0511-001, November 2, 2005...
TUVSA-0511-001.txt
=========================================================== Simple PHP Blog: Multiple XSS Vulnerabilities =========================================================== Technical University of Vienna Security Advisory TUVSA-0511-001, November 2, 2005...
CVE-2005-0511
The CVE-2005-0511 issue affects vBulletin 3.0.6 and earlier (per CVE listing) where enabling “Add Template Name in HTML Comments” allows remote PHP code execution via nested variables in the template parameter. Connected advisories confirm this flaw is exploitable in practice, with public PoCs/mo...
CVE-2003-0511
CVE-2003-0511 affects Cisco Aironet AP1x00 series running IOS 12.2. A malformed URL can cause the web server to reload, enabling a denial-of-service condition. The vulnerability is addressed in IOS 12.2(11)JA1. Remediation/workarounds documented by Cisco include: (1) restrict access to the HTTP s...
CVE-2002-0511
The CVE concerns the default nscd configuration in Caldera OpenLinux 3.1/3.1.1, where PTR records are cached instead of querying the authoritative DNS for the A record. This may let remote attackers bypass host-name based access controls. No explicit remediation is described in the provided docum...
CVE-2002-0511
The default configuration of Name Service Cache Daemon nscd in Caldera OpenLinux 3.1 and 3.1.1 uses cached PTR records instead of consulting the authoritative DNS server for the A record, which could make it easier for remote attackers to bypass applications that restrict access based on host nam...
CVE-2002-0511
The default configuration of Name Service Cache Daemon nscd in Caldera OpenLinux 3.1 and 3.1.1 uses cached PTR records instead of consulting the authoritative DNS server for the A record, which could make it easier for remote attackers to bypass applications that restrict access based on host nam...
CVE-2000-0511
CVE-2000-0511 concerns CUPS (Common Unix Printing System) 1.04 and earlier, where a remote attacker can cause a denial of service by sending a CGI POST request. The vulnerability affects the CUPS CGI handling path and is described as a remote DoS with no confidentiality or integrity impact, and p...
CVE-1999-0511
CVE-1999-0511 covers IP forwarding being enabled on a host that is not a router or firewall. Multiple connected sources confirm this condition and document remediation: disable IP forwarding (e.g., sysctl net.ipv4.ip_forward and related settings) and reboot where applicable. IBM bulletin notes a ...