117 matches found
CVE-2007-0690
CVE-2007-0690 affects myEvent version 1.6. Remote attackers can cause error messages from myevent.php and login.php to reveal server paths, enabling partial information disclosure. The issue arises when processing parameters view[], monthno[], or during a login action without a password, which tr...
myEvent version 1.6 Multiple Path Disclosure Vulnerabilities
netVigilance Security Advisory 24 myEvent version 1.6 Multiple Path Disclosure Vulnerabilities Description: myEvent is Dynamic Calendar based Events Management system with admin panel for adding events, edit and delete built using PHP & mySQL. Display today's event and future events links on the...
CVE-2006-0690
CVE-2006-0690 affects TTS Time Tracking Software 3.0 with multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands via unspecified vectors. Public sources (NVD/eVuln) cite remote exploitation and, per eVuln, unauthorized data modification and additional...
CVE-2004-0690
The DCOPServer in KDE 3.2.3 and earlier allows local users to gain unauthorized access via a symlink attack on DCOP files in the /tmp directory...
CVE-2004-0690
CVE-2004-0690 : The DCOPServer in KDE 3.2.3 and earlier is vulnerable to a local symlink attack in the /tmp directory that allows an attacker to gain unauthorized access. The issue is rooted in symlink handling rather than remote code execution; local access with low privilege is implied. Public ...
CVE-2004-0690
The DCOPServer in KDE 3.2.3 and earlier allows local users to gain unauthorized access via a symlink attack on DCOP files in the /tmp directory...
CVE-2003-0690
...
CVE-2003-0690
Concretely, CVE-2003-0690 affects KDE kdebase (KDM in KDE 3.1.3 and earlier). The flaw is that kdebase does not verify whether pam_setcred succeeds, which can allow a root privilege escalation under certain PAM module configurations (notably MIT pam_krb5). Public sources in connected docs referen...
CVE-2002-0690
McAfee Security ePolicy Orchestrator (ePO) 2.5.1 is affected by CVE-2002-0690, a format-string vulnerability in the HTTP GET request path that can allow remote code execution with SYSTEM privileges. The issue stems from processing of network requests (port 8081) and can enable arbitrary code exec...
CVE-2002-0690
Format string vulnerability in McAfee Security ePolicy Orchestrator ePO 2.5.1 allows remote attackers to execute arbitrary code via an HTTP GET request with a URI containing format strings...
ePolicy Orchestrator HTTP GET Request Remote Format String
If the remote web server is ePolicy Orchestrator, an attacker may use this flaw to execute code with the SYSTEM privileges on this host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Untested. Probably redundant with plugin 11075. include'deprecatednasllevel.inc'; include'compat.inc'; if...
CVE-2001-0690
Format string vulnerability in exim 3.22-10 in Red Hat, 3.12 in Debian and 3.16 in Conectiva in batched SMTP mode allows a remote attacker to execute arbitrary code via format strings in SMTP mail headers...
CVE-2001-0690
CVE-2001-0690 describes a format-string vulnerability in Exim in batched SMTP mode that can let an unauthenticated remote attacker execute arbitrary code via format strings in SMTP headers. The entry specifies affected Exim versions: 3.22-10 (Red Hat), 3.12 (Debian), and 3.16 (Conectiva). Attack ...
CVE-2001-0690
Format string vulnerability in exim 3.22-10 in Red Hat, 3.12 in Debian and 3.16 in Conectiva in batched SMTP mode allows a remote attacker to execute arbitrary code via format strings in SMTP mail headers...
CVE-2000-0690
Auction Weaver CGI script 1.02 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the fromfile parameter...
CVE-2000-0690
Auction Weaver CGI script 1.02 and earlier is affected by a remote command execution vulnerability: an attacker can inject shell metacharacters into the fromfile parameter to execute arbitrary commands. According to the PacketStorm entry, a patch exists (Auction Weaver 1.05). The NVD entry confir...