CVE-2010-1505

CVE-2010-1505 concerns Google Chrome up to version 4.1.249.1059 where loading of pages can occur with the privileges of the New Tab page. The provided documents identify the affected software (Chrome 4.1.249.1059 and earlier) and the underlying issue (New Tab page privileges), but do not provide ...

CVE-2010-1505

Removed by vendor...

CVE-2009-1505

SQL injection vulnerability in the News Page module 5.x before 5.x-1.2 for Drupal allows remote authenticated users, with News Page nodes create and edit privileges, to execute arbitrary SQL commands via the Include Words aka keywords field...

CVE-2009-1505

CVE-2009-1505 affects the Drupal News Page module (5.x) prior to 5.x-1.2. The vulnerability is a SQL injection in the Include Words field that allows remote authenticated users (with News Page create/edit privileges) to execute arbitrary SQL commands. Underlying issue: input handling in the Keywo...

Immunity Canvas: JOOMLACP_INCLUDE

Name| joomlacpinclude ---|--- CVE| CVE-2008-1505 Exploit Pack| CANVAS Description| Joomla Component custompages Remote File Inclusion Notes| CVE Name: CVE-2008-1505 VENDOR: Joomla Repeatability: Infinite References: http://www.securityfocus.com/bid/28409 CVE Url:...

CVE-2008-1505

PHP remote file inclusion vulnerability in the SSTREAMTV custompages comcustompages 1.1 and earlier component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the cpage parameter to index.php...

CVE-2008-1505

CVE-2008-1505 is a PHP remote file inclusion vulnerability in the Joomla! component SSTREAMTV custompages (com_custompages) 1.1 and earlier. The flaw allows an attacker to execute arbitrary PHP code by supplying a URL in the cpage parameter to index.php. Affected reports consistently identify the...

CVE-2008-1505

creationtimestamp| type| source ---|---|--- 2008-03-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5294...

CVE-2003-1505

Vulnerability summary (CVE-2003-1505): Microsoft Internet Explorer 6.0 is vulnerable to a remote denial of service (crash) by crafted HTML/CSS. Specifically, a page or HTML email containing a textarea inside a div whose scrollbar-base-color is modified via CSS and then moved can trigger the crash...

CVE-2007-1505

CVE-2007-1505 affects Fujitsu FENCE-Pro before V5L01 and Systemwalker Desktop Encryption (V12.0L10, L10A, L10B, L20, and V13.0.0). The vulnerability resides in self-decoding files created by these products, enabling local users to view contents and extract the decoding password protecting the fil...

CVE-2006-1505

basemaintenance.php in Basic Analysis and Security Engine BASE before 1.2.4 melissa, when running in standalone mode, allows remote attackers to bypass authentication, possibly by setting the standalone parameter to "yes"...

CVE-2006-1505

The vulnerability CVE-2006-1505 affects BASE (Basic Analysis and Security Engine): base_maintenance.php in BASE before 1.2.4 (melissa) running in standalone mode lets remote attackers bypass authentication, possibly by setting the standalone parameter to "yes". The issue enables an attacker to pe...

CVE-2006-1505

basemaintenance.php in Basic Analysis and Security Engine BASE before 1.2.4 melissa, when running in standalone mode, allows remote attackers to bypass authentication, possibly by setting the standalone parameter to "yes"...

CVE-2001-1505

The CVE-2001-1505 entry covers tinc versions 1.0pre3 and 1.0pre4, where remote attackers can inject data into user sessions by sniffing and replaying packets. Affected component: tinc (specific versions cited). Underlying issue: packet sniffing/replay enables session data modification (integrity ...

CVE-2005-1505

The CVE describes a vulnerability in Mail.app 2.0 on Mac OS X 10.4 during IMAP account configuration: the new account wizard does not prompt for SSL until after the password is sent, allowing plaintext leakage. Affected component is the IMAP credential flow in Mail.app 2.0; root cause is delayed ...

CVE-2004-1505

Technical details (affected product/component/versions/root cause) are not publicly provided in the supplied Connected documents. Monitor for updates to confirm scope, impact, and remediation for CVE-2004-1505.

CVE-2004-1505

Directory traversal vulnerability in index.php in Just Another Flat file JAF CMS 3.0RC allows remote attackers to read arbitrary files and possibly execute PHP code via a .. dot dot in the show parameter...

CVE-2002-1505

SQL injection vulnerability in board.php for WoltLab Burning Board wBB 2.0 RC 1 and earlier allows remote attackers to modify the database and possibly gain privileges via the boardid parameter...

CVE-1999-1505

CVE-1999-1505 concerns the QuakeWorld 2.10 server/client stack. A buffer overflow in the handling of the initial connect packet can be triggered by a long connect, allowing a remote attacker to cause a crash (DoS) and potentially execute arbitrary commands. The available documents state the issue...