85 matches found
CVE-2008-0691
CVE-2008-0691 affects the WordPress plugin WP-Footnotes (v2.2) by Simon Elvery. The vulnerability is multiple cross-site scripting (XSS) in admin_panel.php, exploitable via the parameters wp_footnotes_current_settings[priority], [style_rules], [pre_footnotes], and [post_footnotes]. The issue is d...
CVE-2007-0691
The CVE covers UseBB before 1.0.6, where remote attackers can obtain server-path information through an error message triggered by unspecified GET/POST parameters to an unspecified script. The root cause is a path disclosure vulnerability in UseBB’s error handling. Affected product: UseBB (PHP/My...
UseBB Version 1.0.4 Path Disclosure Vulnerability
netVigilance Security Advisory 16 UseBB Version 1.0.4 Path Disclosure Vulnerability Description: UseBB is an Open Source forum package developed in PHP and using the popular MySQL database back-end to store data. Unlike other popular forum systems, UseBB does not strive to have as many features a...
CVE-2003-0691
CVE-2003-0691 entry is rejected/not used; it does not represent an active vulnerability.
CVE-2006-0691
edituser.php in TTS Time Tracking Software 3.0 does not verify that the name and password are correct, which allows remote attackers to overwrite arbitrary data belonging to any account...
CVE-2006-0691
edituser.php in TTS Time Tracking Software 3.0 does not verify that the name and password are correct, which allows remote attackers to overwrite arbitrary data belonging to any account...
CVE-2006-0691
CVE-2006-0691 concerns TTS Time Tracking Software 3.0. The vulnerability lies in edituser.php, which does not verify that the provided name and password are correct, enabling remote attackers to overwrite arbitrary data belonging to any account. Affected component: edituser.php in Time Tracking S...
CVE-2005-0691
The CVE-2005-0691 issue is a PHP remote file inclusion in SocialMPN’s modules.php (article mode). The name parameter can reference a remote URL to execute arbitrary PHP code, enabling remote code execution on the server. The document set does not specify affected versions or a patch. NVD data lis...
CVE-2005-0691
PHP remote file inclusion vulnerability in article mode for modules.php in SocialMPN allows remote attackers to execute arbitrary PHP code by modifying the name parameter to reference a URL on a remote web server that contains the code...
CVE-2004-0691
Heap-based buffer overflow in the BMP image format parser for the QT library qt3 before 3.3.3 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code...
CVE-2004-0691
Heap-based buffer overflow in the BMP image format parser for the QT library qt3 before 3.3.3 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code...
Fedora Core 2 : gdk-pixbuf-0.22.0-11.2.3 (2004-287)
During testing of a previously fixed flaw in Qt CVE-2004-0691, a flaw was discovered in the BMP image processor of gdk-pixbuf. An attacker could create a carefully crafted BMP file which would cause an application to enter an infinite loop and not respond to user input when the file was opened by...
CVE-2004-0691
Heap-based buffer overflow in the BMP image format parser for the QT library qt3 before 3.3.3 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code...
Fedora Core 2 : qt-3.3.3-0.1 (2004-271)
During a security audit, Chris Evans discovered a heap overflow in the BMP image decoder in Qt versions prior to 3.3.3. An attacker could create a carefully crafted BMP file in such a way that it would cause an application linked with Qt to crash or possibly execute arbitrary code when the file w...
Fedora Core 1 : qt-3.1.2-14.2 (2004-270)
During a security audit, Chris Evans discovered a heap overflow in the BMP image decoder in Qt versions prior to 3.3.3. An attacker could create a carefully crafted BMP file in such a way that it would cause an application linked with Qt to crash or possibly execute arbitrary code when the file w...
FreeBSD : qt -- image loader vulnerabilities (ebffe27a-f48c-11d8-9837-000c41e2cdad)
Qt contains several vulnerabilities related to image loading, including possible crashes when loading corrupt GIF, BMP, or JPEG images. Most seriously, Chris Evans reports that the BMP crash is actually due to a heap buffer overflow. It is believed that an attacker may be able to construct a BMP...
CVE-2002-0691
Microsoft Internet Explorer 5.01 and 5.5 allows remote attackers to execute scripts in the Local Computer zone via a URL that references a local HTML resource file, a variant of "Cross-Site Scripting in Local HTML Resource" as identified by CAN-2002-0189...
CVE-2002-0691
Microsoft Internet Explorer 5.01 and 5.5 allows remote attackers to execute scripts in the Local Computer zone via a URL that references a local HTML resource file, a variant of "Cross-Site Scripting in Local HTML Resource" as identified by CAN-2002-0189...