CVE-2010-1504

CVE-2010-1504 is an XSS vulnerability in Google Chrome up to version 4.1.249.1059, allowing remote attackers to inject arbitrary scripts via vectors related to chrome://downloads. The flaw is described as affecting Chrome before 4.1.249.1059, with CVSS base metrics: AV:N/AC:L/Au:N/C:C/I:C/A:C (ba...

CVE-2009-1504

CVE-2009-1504 affects Absolute Form Processor XE 1.5. The vulnerability allows remote attackers to bypass authentication and gain administrative access by setting the xlaAFPadmin cookie to “lvl=1&userid=1.” This is supported by NVD/NVD-derived details; CVSS metrics indicate network attack, low co...

CVE-2009-1504

creationtimestamp| type| source ---|---|--- 2009-04-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8529...

Phorum < 5.2.10 Cross-Site Scripting/Request Forgery

=cicatriz [email protected]==advisories= / / / / // / / // / o / / .-/ =Phorum 5.2.10 Cross-Site Scripting/Request Forgery==/= == =Advisory & Vulnerability Information=== Title: Phorum 5.2.10 Cross-Site Scripting/Request Forgery Advisory ID: VUDO-2009-1504 Advisory URL:...

CVE-2008-1504

The CVE-2008-1504 entry concerns a Cross-site Scripting (XSS) vulnerability in the setup.php3 component of phpHeaven phpMyChat 0.14.5. The issue is triggered by untrusted input in the Lang parameter, allowing remote attackers to inject arbitrary web-script/HTML. The description and references ind...

CVE-2008-1504

creationtimestamp| type| source ---|---|--- 2008-03-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31467...

Debian: Security Advisory (DSA-1504-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1504-1 : kernel-source-2.6.8 - several vulnerabilities

Several local and remote vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-5823 LMH reported a potential local DoS which...

CVE-2003-1504

CVE-2003-1504 affects Goldlink 3.0 and is caused by a SQL injection in the variables.php component, enabling remote attackers to manipulate the database via the vadmin_login or vadmin_pass cookies in a request to goldlink.php. The vulnerability permits arbitrary SQL execution and comes with a Hig...

CVE-2003-1504

SQL injection vulnerability in variables.php in Goldlink 3.0 allows remote attackers to execute arbitrary SQL commands via the 1 vadminlogin or 2 vadminpass cookie in a request to goldlink.php...

CVE-2007-1504

The Interstage Application Server (IJServer) Servlet Service in Fujitsu’s Interstage product line contains a cross-site scripting (XSS) vulnerability in the Interstage Business Application/Management Console Servlet Service (IJServer 8.0.2 and earlier). The root cause is described as an XSS flaw ...

CVE-2006-1504

CVE-2006-1504 concerns multiple XSS vulnerabilities in Arab Portal 2.0 (also called Arab Dynamic Portal/ADP). The issues allow remote attackers to inject arbitrary web script or HTML by manipulating the title parameter in two pages: online.php and download.php. The affected software is Arab Porta...

CVE-2001-1504

The CVE-2001-1504 entry relates to Lotus Notes R5 Client 4.6, where a Lotus Notes object containing code in an event can be automatically executed when the user processes an e-mail message, enabling remote command execution. The vulnerability is rated CVSS v2 base score 7.5 (HIGH) with network at...

CVE-2004-1504

The displaycontent function in config.php for Just Another Flat file JAF CMS 3.0RC allows remote attackers to gain sensitive information via a blank show parameter, which reveals the installation path in an error message, as demonstrated using index.php...

CVE-2004-1504

The CVE concerns Just Another Flat File (JAF) CMS 3.0RC. The vulnerability is in the displaycontent function of config.php, which allows remote attackers to gain sensitive information by supplying a blank show parameter; an error message reveals the installation path (demonstrated with index.php)...

CVE-2004-1504

The displaycontent function in config.php for Just Another Flat file JAF CMS 3.0RC allows remote attackers to gain sensitive information via a blank show parameter, which reveals the installation path in an error message, as demonstrated using index.php...

CVE-2003-1504

SQL injection vulnerability in variables.php in Goldlink 3.0 allows remote attackers to execute arbitrary SQL commands via the 1 vadminlogin or 2 vadminpass cookie in a request to goldlink.php...

CVE-2002-1504

Directory traversal vulnerability in WebServer 4 Everyone 1.22 allows remote attackers to read arbitrary files via ".." dot-dot backslash sequences in a URL...

CVE-2002-1504

This CVE-2002-1504 entry pertains to WebServer 4 Everyone 1.22 and describes a directory traversal vulnerability where remote attackers can read arbitrary files through URL dot-dot backslash sequences ("..\"). The described root cause is improper normalization of path traversal in user-supplied U...

CVE-2001-1504

Lotus Notes R5 Client 4.6 allows remote attackers to execute arbitrary commands via a Lotus Notes object with code in an event, which is automatically executed when the user processes the e-mail message...