140 matches found
CVE-2009-1487
creationtimestamp| type| source ---|---|--- 2009-04-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8493...
FreeBSD Ports: wget, wget-devel
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2008-1487
Multiple cross-site scripting XSS vulnerabilities in LinPHA before 1.3.3 allow remote attackers to inject arbitrary web script or HTML via 1 ftp/index.php, 2 viewer.php, 3 functions/other.php, 4 include/leftmenu.class.php, and 5 plugins/stats/statsview.php...
CVE-2008-1487
LinPHA contains multiple cross-site scripting (XSS) vulnerabilities in versions before 1.3.3. Attack vectors include (1) ftp/index.php, (2) viewer.php, (3) functions/other.php, (4) include/left_menu.class.php, and (5) plugins/stats/stats_view.php. The issue is described across CVE-2008-1487 entri...
Debian: Security Advisory (DSA-1487-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 1487-1 (libexif)
The remote host is missing an update to libexif announced via advisory DSA 1487-1. OpenVAS Vulnerability Test $Id: deb14871.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1487-1 libexif Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
CVE-2003-1487
Phorum 3.4 through 3.4.2 contains multiple remote command-injection vulnerabilities that allow arbitrary command execution and modification of Phorum configuration files via the (1) UserAdmin program, (2) Edit user profile, or (3) stats program. The root cause is not explicitly detailed beyond th...
CVE-2007-1487
Directory traversal in Sascha Schroeder (CyberT Teddy) WebLog: index.php showsArticles action vulnerable to reading arbitrary files via .. in the file parameter. Root cause is improper input handling allowing path traversal. Impact stated as read access to arbitrary files; no exploit specifics or...
CVE-2006-1487
CVE-2006-1487 describes a Cross-site scripting (XSS) vulnerability in ActiveCampaign SupportTrio 2.50.2. The flaw allows remote attackers to inject arbitrary web script or HTML via unspecified parameters to the KnowledgeBase search module. The NVD reports a CVSS2 base score of 4.3 (MEDIUM) with N...
RHEL 4 : wget (RHSA-2005:771)
The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2005:771 advisory. GNU Wget is a file retrieval utility that can use either the HTTP or FTP protocols. A bug was found in the way wget writes files to the local...
CVE-2005-1487
FishCart 3.1 contains multiple SQL injection vulnerabilities exploitable through the cartid parameter to upstnt.php or the psku parameter to display.php. The issue is documented across CVE-2005-1487 entries, with vendor disputes over the report (vendor claims forced SQL errors) and notes that the...
CVE-2004-1487
CVE-2004-1487 affects wget 1.8.x and 1.9.x, where a remote server can cause overwriting of local files via a redirect URL containing ".." that resolves to the attacker’s IP, bypassing wget’s ".." filtering. Connected docs confirm this as a vulnerability in redirection URL handling and indicate up...
CVE-2004-1487
wget 1.8.x and 1.9.x allows a remote malicious web server to overwrite certain files via a redirection URL containing a ".." that resolves to the IP address of the malicious server, which bypasses wget's filtering for ".." sequences...
CVE-2004-1487
wget 1.8.x and 1.9.x allows a remote malicious web server to overwrite certain files via a redirection URL containing a ".." that resolves to the IP address of the malicious server, which bypasses wget's filtering for ".." sequences...
CVE-2002-1487
The IRC component of Trillian 0.73 and 0.74 allows remote malicious IRC servers to cause a denial of service crash by sending the raw messages 1 206, 2 211, 3 213, 4 214, 5 215, 6 217, 7 218, 8 243, 9 302, 10 317, 11 324, 12 332, 13 333, 14 352, and 15 367...
CVE-2002-1487
The CVE-2002-1487 entry concerns the IRC component of Trillian versions 0.73 and 0.74. The vulnerability allows remote malicious IRC servers to cause a denial of service (crash) by sending any of the 15 specified raw messages (numbers 206, 211, 213, 214, 215, 217, 218, 243, 302, 317, 324, 332, 33...
CVE-2001-1487
popauth utility in Qualcomm Qpopper 4.0 and earlier allows local users to overwrite arbitrary files and execute commands as the pop user via a symlink attack on the -trace file option...
CVE-1999-1487
The CVE-1999-1487 entry describes a local privilege escalation in AIX 4.3 where printq users can gain root privileges by creating or modifying any file on the system via the vulnerable digest component. Affected software is AIX 4.3; the advisory notes root/complete impact (as reflected in the NVD...