95 matches found
CVE-2010-0860
CVE-2010-0860 affects Oracle Database Core RDBMS components in 9.2.0.8 (and DV variants), 10.1.0.5, 10.2.0.4, and 11.1.0.7. The vulnerability allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to the Create User privilege. The issu...
CVE-2009-0860
CVE-2009-0860: XSS in the web UI of NetMRI 3.0.1 and earlier, related to error pages. The vulnerability is in the login application’s web interface, allowing remote script/HTML injection via unspecified vectors. CVSS v2 base score 4.3 (Medium) with network attack vector, require no authentication...
CVE-2008-0860
Unspecified vulnerability in the AVG plugin in Kerio MailServer before 6.5.0 has unspecified impact via unknown remote attack vectors related to null DACLs...
CVE-2008-0860
CVE-2008-0860 affects Kerio MailServer prior to 6.5.0 via the AVG plug-in, with an unspecified impact via unknown remote attack vectors related to null DACLs. The exact affected versions, root cause details, and remediation are not fully disclosed in the provided documents; exploitation status is...
CVE-2007-0860
CVE-2007-0860 affects local Calendar System 1.1 with multiple PHP remote file inclusion flaws. An attacker can cause arbitrary PHP code execution by supplying a URL to the TEMPLATE_DIR parameter (for files such as showinvoices.php, showmonth.php, showevents.php, retrieveinvoice.php, modifyitem.ph...
CVE-2006-0860
CVE-2006-0860 affects Michael Salzer Guestbox 0.6 and other versions before 0.8, where multiple XSS vulnerabilities exist. The underlying issue is that HTML tags following a "http://" string bypass a regex check, enabling remote injection of script/HTML; other attack vectors are also noted. No pu...
CVE-2003-0860
Buffer overflows in PHP before 4.3.3 have unknown impact and unknown attack vectors...
CVE-2003-0860
Buffer overflows in PHP before 4.3.3 have unknown impact and unknown attack vectors...
CVE-2003-0860
CVE-2003-0860 affects PHP before 4.3.3. The issue: buffer overflows in PHP with unknown impact/attack vectors per NVD; Red Hat et al. similarly cite buffer overflows in older PHP. Public fix available: upgrade to PHP 4.3.3 (see php.net release notes).
CVE-2002-0860
The LoadText method in the spreadsheet component in Microsoft Office Web Components OWC 2000 and 2002 allows remote attackers to read arbitrary files through Internet Explorer via a URL that redirects to the target file...
CVE-2002-0860
The CVE-2002-0860 vulnerability affects Microsoft Office Web Components (OWC) 2000 and 2002, where the LoadText method in the spreadsheet component allows a remote attacker using an Internet Explorer URL redirect to read arbitrary local files. Underlying issue: inadequate URL handling in the OWC ...
CVE-2002-0860
The LoadText method in the spreadsheet component in Microsoft Office Web Components OWC 2000 and 2002 allows remote attackers to read arbitrary files through Internet Explorer via a URL that redirects to the target file...
CVE-2001-0860
Terminal Services Manager MMC in Windows 2000 and XP trusts the Client Address IP address that is provided by the client instead of obtaining it from the packet headers, which allows clients to spoof their public IP address, e.g. through a Network Address Translation NAT...
CVE-2000-0860
The CVE-2000-0860 entry concerns PHP 3 and PHP 4 file-upload handling. The vulnerability arises from RFC 1867-based file uploads where an attacker can manipulate hidden form field names that correspond to internal PHP variables, enabling reading of arbitrary files. Public documentation in connect...