80 matches found
CVE-2010-0673
SQL injection vulnerability in cplphoto.php in the Copperleaf Photolog plugin 0.16, and possibly earlier, for WordPress allows remote attackers to execute arbitrary SQL commands via the postid parameter...
CVE-2010-0673
The Copperleaf Photolog WordPress plugin, affected at v0.16 (and possibly earlier), contains an SQL injection in cplphoto.php that allows remote attackers to execute arbitrary SQL commands via the postid parameter. This vulnerability impacts confidentiality, integrity, and availability as describ...
CVE-2010-0673
creationtimestamp| type| source ---|---|--- 2010-02-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11458...
CVE-2009-0673
CVE-2009-0673 describes an eval injection in RavenNuke 2.30’s Custom Fields within the Your Account module. The vulnerability allows remote authenticated administrators to execute arbitrary PHP code via the ID Field Name box in a yaCustomFields action to admin.php. Affected product/stack: Raven W...
CVE-2009-0673
Eval injection vulnerability in the Custom Fields feature in the Your Account module in Raven Web Services RavenNuke 2.30 allows remote authenticated administrators to execute arbitrary PHP code via the ID Field Name box in a yaCustomFields action to admin.php...
CVE-2009-0673
creationtimestamp| type| source ---|---|--- 2009-02-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8068...
DEBIAN-CVE-2008-0673
TinTin++ 1.97.9 and WinTin++ 1.97.9 open files on the basis of an inbound file-transfer request, before the user has an opportunity to decline the request, which allows remote attackers to truncate arbitrary files in the top level of a home directory...
CVE-2008-0673
TinTin++ versions 1.97.9 and WinTin++ 1.97.9 are affected by CVE-2008-0673, where an inbound file-transfer request can cause the application to truncate arbitrary files in the top level of the user’s home directory without user confirmation. This vulnerability allows remote attackers to modify fi...
CVE-2007-0673
CVE-2007-0673 affects BrightStor ARCserve Backup for Laptops & Desktops r11.1. LGSERVER.EXE can be remotely triggered to crash the daemon via a crafted 0xFFFFFFFF value during authentication, causing an out-of-bounds read and denial of service. This is documented with a network attack vector and ...
CVE-2005-0673
CVE-2005-0673 affects phpBB 2.0.13 via Cross-site scripting in usercp_register.php, enabling remote attackers to inject arbitrary HTML/JS by manipulating (1) allowhtml, (2) allowbbcode, or (3) allowsmilies in signatures associated with privmsg.php or viewtopic.php. Documented impact is limited to...
CVE-2002-0673
The enrollment process for Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 allows attackers with physical access to the phone to log out the current user and re-register the phone using MyPingtel Sign-In to gain remote access and perform unauthorized actions...
CVE-2002-0673
CVE-2002-0673 concerns Pingtel xpressa SIP phones (PX-1, software 1.2.5–1.2.7.4). The vulnerability enables attackers with physical access to log out the current user via the enrollment process and re-register the phone using MyPingtel Sign-In, gaining remote access and allowing unauthorized acti...
CVE-2004-0673
Cross-site scripting XSS vulnerability in SCI Photo Chat Server 3.4.9 allows remote attackers to execute arbitrary web script as other users via an invalid request that is echoed in the resulting error message...
CVE-2004-0673
CVE-2004-0673 affects SCI Photo Chat Server 3.4.9 with a cross-site scripting (XSS) vulnerability that lets remote attackers trigger arbitrary script execution in other users by echoing an invalid request in the error message. The cited sources describe the issue but do not provide any concrete e...
CVE-2004-0673
Cross-site scripting XSS vulnerability in SCI Photo Chat Server 3.4.9 allows remote attackers to execute arbitrary web script as other users via an invalid request that is echoed in the resulting error message...
CVE-2000-0673
The NetBIOS Name Server NBNS protocol does not perform authentication, which allows remote attackers to cause a denial of service by sending a spoofed Name Conflict or Name Release datagram, aka the "NetBIOS Name Server Protocol Spoofing" vulnerability...
CVE-2000-0673
The CVE-2000-0673 issue affects NetBIOS Name Server (NBNS) where the protocol lacks authentication, allowing remote attackers to cause a denial of service by sending spoofed Name Conflict or Name Release datagrams. Documented impact is DoS on affected hosts, e.g., NetBIOS name resolution disrupti...
CVE-1999-0673
CVE-1999-0673 describes a buffer overflow in the ALMail32 POP3 client triggered by crafted From: or To: headers. The vulnerability appears in multiple trusted sources (NVD/RH/EUVD/CVE lists) and is categorized with a CVSS v2 base score of 5.1 (MEDIUM) with network attack vector, high complexity, ...