CVE-2008-1688

CVE-2008-1688 affects GNU m4 up to version 1.4.10, with the issue arising from how filenames are handled when using -F. The vulnerability is described as allowing context-dependent attackers to execute arbitrary code due to improper filename handling in the code paths related to maketemp/mkstemp ...

[slackware-security] m4

New m4 packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, and -current to fix security issues. More details about the issues may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2008-1687...

CVE-2007-1688

The CVE-2007-1688 entry concerns a buffer overflow in the PhPInfo ActiveX control (PhPCtrl.dll) used by Callisto PhotoParade Player. The vulnerability affects the PhPInfo ActiveX control and its FileVersionOf property, enabling remote code execution when a user opens a specially crafted page, per...

CVE-2006-1688

Summary of CVE-2006-1688 (and related CVE-2006-1610) : SQuery versions 4.5 and earlier contain multiple PHP remote file inclusion vulnerabilities that allow remote code execution via a URL in the libpath parameter to scripts in the lib/ directory (e.g., ase.php, devi.php, doom3.php, et.php, and o...

Directory traversal

WordPress 2.0.1 and earlier allows remote attackers to obtain sensitive information via a direct request to 1 default-filters.php, 2 template-loader.php, 3 rss-functions.php, 4 locale.php, 5 wp-db.php, and 6 kses.php in the wp-includes/ directory; and 7 edit-form-advanced.php, 8...

CVE-2002-1688

This CVE concerns Microsoft Internet Explorer versions 5.5–6.0, where the browser history feature can be abused to execute arbitrary JavaScript in the context of a user session. An attacker can inject JavaScript into the URL, which is executed when the user clicks Back, allowing remote script exe...

CVE-2005-1688

Wordpress 1.5 and earlier allows remote attackers to obtain sensitive information via a direct request to files in 1 wp-content/themes/, 2 wp-includes/, or 3 wp-admin/, which reveal the path in an error message...

CVE-2005-1688

CVE-2006-0986 affects WordPress 2.0.1 and earlier. The vulnerability allows remote attackers to obtain sensitive information by requesting specific files in wp-includes/ and wp-admin/ (e.g., default-filters.php, template-loader.php, rss-functions.php, locale.php, wp-db.php, kses.php; edit-form-ad...

CVE-2004-1688

CVE-2004-1688 affects Pigeon Server 3.02.0143 and earlier. A remote attacker can cause a denial of service by sending a long login name to TCP port 3103, resulting in an infinite loop and CPU consumption. The provided documents do not include specific fixes or remediation steps.

CVE-2004-1688

Pigeon Server 3.02.0143 and earlier allows remote attackers to cause a denial of service infinite loop and CPU consumption via a long login name sent to port 3103...

CVE-2004-1688

Pigeon Server 3.02.0143 and earlier allows remote attackers to cause a denial of service infinite loop and CPU consumption via a long login name sent to port 3103...

CVE-2002-1688

The browser history feature in Microsoft Internet Explorer 5.5 through 6.0 allows remote attackers to execute arbitrary script as other users and steal authentication information via cookies by injecting JavaScript into the URL, which is executed when the user hits the Back button...