128 matches found
CVE-2007-1479
The CVE-2007-1479 entry details a Cross-site Scripting (XSS) vulnerability in Guestbook.php of Creative Guestbook 1.0. The issue allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, potentially enabling client-side script execution in affected users’ browse...
CVE-2006-1479
CVE-2006-1479 pertains to multiple XSS vulnerabilities in Serge Rey’s gtd-php (Getting Things Done) 0.5. The affected components are user-input fields across several PHP scripts: newProject.php, newList.php, newWaitingOn.php (Descriptions); newProject.php, newList.php, newWaitingOn.php, newCheckl...
CVE-2001-1479
Sun Management Center (SMC) 2.0 on Solaris 8 is affected. A local user can delete arbitrary files by exploiting a symlink on /tmp/smc$SMC_PORT, as described in CVE-2001-1479. The issue enables LOCAL access with low complexity and partial integrity impact; no remediation details are provided in th...
CVE-2001-1479
smcboot in Sun SMC Sun Management Center 2.0 in Solaris 8 allows local users to delete arbitrary files via a symlink attack on /tmp/smc$SMCPORT...
CVE-2005-1479
CVE-2005-1479 affects JGS-Portal 3.0.1 and earlier. A SQL injection in jgs_portal.php via the id parameter allows remote attackers to execute arbitrary SQL commands. This impacts confidentiality, integrity, and availability (partial). Attack vector is network with low complexity and no authentica...
CVE-2001-1479
smcboot in Sun SMC Sun Management Center 2.0 in Solaris 8 allows local users to delete arbitrary files via a symlink attack on /tmp/smc$SMCPORT...
CVE-1999-1479
CVE-1999-1479 affects the CGI textcounter.pl (Matt Wright) – the installed textcounter CGI allows remote command execution via shell metacharacters. Impact is remote code execution with the privileges of the http daemon (usually root or nobody). Remediation available is to remove the CGI from /cg...