90 matches found
Debian DSA-1608-1 : mysql-dfsg-5.0 - authorization bypass
Sergei Golubchik discovered that MySQL, a widely-deployed database server, did not properly validate optional data or index directory paths given in a CREATE TABLE statement, nor would it under proper conditions prevent two databases from using the same paths for data or index files. This permits...
CVE-2008-1608
CVE-2008-1608 documents a SQL injection in Clever Copy 3.0 via postview.php, where an attacker can manipulate the ID parameter to execute arbitrary SQL commands. The entry notes this is a different vector from CVE-2008-0363 and CVE-2006-0583. The connected sources confirm the affected software (C...
CVE-2008-1608
SQL injection vulnerability in postview.php in Clever Copy 3.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter, a different vector than CVE-2008-0363 and CVE-2006-0583...
CVE-2007-1608
CVE-2007-1608 affects IBM WebSphere Application Server (WAS) 6.0.x prior to 6.0.2.19. The root cause is a CRLF injection in input handling that allows remote attackers to inject arbitrary HTTP headers and perform HTTP response splitting. Impact is exposure of manipulated response headers with pot...
Mandrake Linux Security Advisory : php (MDKSA-2006:074)
A cross-site scripting XSS vulnerability in phpinfo info.c in PHP = 5.1.2 allows remote attackers to inject arbitrary web script or HTML via long array variables, including 1 a large number of dimensions or 2 long values, which prevents HTML tags from being removed. CVE-2006-0996 Directory...
CVE-2006-1608
CVE-2006-1608 affects PHP 4.4.2 and 5.1.2 where the copy() path in file.c can bypass safe_mode and read arbitrary files when the source argument contains a compress.zlib:// URI. The issue is local to the attacker’s host and allows reading of files via the compress.zlib path. Connected advisories ...
CVE-2005-1608
The CVE-2005-1608 entry concerns the Blocks module in Spidean AutoTheme 1.7 and AT-Lite for PostNuke. Multiple unspecified vulnerabilities affect the Blocks component, with exposure described as potentially allowing a remote attacker to gain unauthorized access to the remote host. Affected produc...
CVE-2002-1608
This CVE concerns a local buffer overflow in traceroute on HP Tru64 UNIX, affecting versions 5.1a, 5.1, 5.0a, 4.0g, and 4.0f. The underlying issue is a buffer overflow in the traceroute routine that allows a local user to execute arbitrary code. The available documents state the vulnerability but...
