Immunity Canvas: FUZZYLIME_INCLUDE

Name| fuzzylimeinclude ---|--- CVE| CVE-2008-1405 Exploit Pack| CANVAS Description| fuzzylime cms = 3.01 Remote File include Notes| CVE Name: CVE-2008-1405 VENDOR: FuzzyLime Repeatability: Infinite References: http://www.securityfocus.com/bid/28838 CVE Url: https://vulners.com/cve/CVE-2008-1405...

CVE-2008-1405

The CVE-2008-1405 entry concerns fuzzylime CMS (versions ≤ 3.01). A PHP remote file inclusion vulnerability in code/display.php allows an attacker to execute arbitrary PHP code by supplying a URL in the admindir parameter. The issue enables remote code execution, with the CVSS base score reported...

Debian Security Advisory DSA 1405-2 (zope-cmfplone)

The remote host is missing an update to zope-cmfplone announced via advisory DSA 1405-2. OpenVAS Vulnerability Test $Id: deb14052.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1405-2 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 1405-2 (zope-cmfplone)

The remote host is missing an update to zope-cmfplone announced via advisory DSA 1405-2. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Debian Security Advisory DSA 210-1 (lynx, lynx-ssl)

The remote host is missing an update to lynx, lynx-ssl announced via advisory DSA 210-1. OpenVAS Vulnerability Test $Id: deb2101.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 210-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

CVE-2003-1405

Technical details about CVE-2003-1405 are not publicly provided in the supplied documents; monitor for updates.

Design/Logic Flaw

Unspecified vulnerability in the 1 attach database and 2 create database functionality in Firebird before 2.0.2, when a filename exceeds MAXPATHLEN, has unknown impact and attack vectors, aka CORE-1405...

CVE-2007-4664

Unspecified vulnerability in the 1 attach database and 2 create database functionality in Firebird before 2.0.2, when a filename exceeds MAXPATHLEN, has unknown impact and attack vectors, aka CORE-1405...

CVE-2007-4664

Unspecified vulnerability in the 1 attach database and 2 create database functionality in Firebird before 2.0.2, when a filename exceeds MAXPATHLEN, has unknown impact and attack vectors, aka CORE-1405...

CVE-2007-4664

CVE-2007-4664 affects the Firebird database system, with the vulnerability described as occurring in the (1) attach database and (2) create database functionality when a filename exceeds MAX_PATH_LEN, and is limited to versions before 2.0.2. The Initial Description and connected records explicitl...

CVE-2007-4664

Unspecified vulnerability in the 1 attach database and 2 create database functionality in Firebird before 2.0.2, when a filename exceeds MAXPATHLEN, has unknown impact and attack vectors, aka CORE-1405...

CVE-2007-1405

Cross-site scripting XSS vulnerability in the "download wiki page as text" feature in Trac before 0.10.3.1, when Microsoft Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters...

CVE-2007-1405

CVE-2007-1405 is a Cross-site Scripting (XSS) vulnerability in Trac’s "download wiki page as text" feature. The issue arises when using Microsoft Internet Explorer and allows remote attackers to inject arbitrary web script or HTML via unspecified parameters. Affected is Trac prior to version 0.10...

CVE-2006-1405

CVE-2006-1405 is a reported Cross-site Scripting (XSS) vulnerability in the SweetSuite.NET Content Management System (ssCMS) prior to or including version 2.1.0, affecting the search.aspx functionality. The flaw enables remote attackers to inject arbitrary web script or HTML through the keywords ...

CVE-2005-1405

CVE-2005-1405 affects Lotus Domino 6.5.x (before 6.5.4) and 6.0.x (before 6.0.5). The vulnerability is an HTTP response splitting flaw in the @SetHTTPHeader function, enabling attackers to poison the web cache through malicious applications. The provided sources describe the issue and affected ve...

CVE-2004-1405

Affected software: MediaWiki 1.3.8 and earlier (with Apache mod_mime); also referenced as vulnerable in MediaWiki

CVE-2004-1405

MediaWiki 1.3.8 and earlier, when used with Apache modmime, does not properly handle files with two file extensions, such as .php.rar, which allows remote attackers to upload and execute arbitrary code...

Debian DSA-210-1 : lynx - CRLF injection

lynx a text-only web browser did not properly check for illegal characters in all places, including processing of command line options, which could be used to insert extra HTTP headers in a request. For Debian GNU/Linux 2.2/potato this has been fixed in version 2.8.3-1.1 of the lynx package and...

CVE-2002-1405

CRLF injection vulnerability in Lynx 2.8.4 and earlier allows remote attackers to inject false HTTP headers into an HTTP request that is provided on the command line, via a URL containing encoded carriage return, line feed, and other whitespace characters...

CVE-2002-1405

The CVE-2002-1405 issue affects Lynx 2.8.4 and earlier and describes a CRLF injection flaw that lets an attacker add extra HTTP headers via a URL containing encoded CR/LF characters on the command line. Public advisories (Debian DSA-210, RHSA-2003:030, RHSA-2003:030) indicate that updated Lynx pa...