99 matches found
CVE-2011-1715
CVE-2011-1715 describes a directory traversal vulnerability in EyeOS-integrated QooxDoo components (notably the file devtools/qooxdoo-sdk/framework/source/resource/qx/test/part/delay.php). The flaw allows remote attackers to read arbitrary files by supplying encoded dot-dot sequences in the file ...
CVE-2010-1715
Directory traversal vulnerability in the Online Examination aka Online Exam or comonlineexam component 1.5.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. NOTE: some of these details are obtained from third party information...
CVE-2010-1715
Joomla! Component Online Exam (com_onlineexam) 1.5.0 is affected by a Local File Inclusion due to a directory traversal (.. in the controller parameter to index.php). Exploitation can allow reading arbitrary files on the server. No exploitation details are provided in the core CVE description; th...
CVE-2010-1715
creationtimestamp| type| source ---|---|--- 2010-04-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12174...
Apple Safari Multiple Vulnerabilities June-09 (Windows) - I
This host is installed with Apple Safari Web Browser and is prone to to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbapplesafarimultvulnjun091.nasl 4865 2016-12-28 16:16:43Z teissa $ Apple Safari Multiple Vulnerabilities June-09 Windows - I Authors: Sharath S Copyright: Copyright c...
CVE-2009-1715
CVE-2009-1715 affects Apple Safari/WebKit (Web Inspector) prior to version 4.0. The vulnerability is an XSS issue in Web Inspector that allows user-assisted remote attackers to inject arbitrary script or HTML and to read local files by exploiting script execution with incorrect privileges. Connec...
CVE-2009-1715
Cross-site scripting XSS vulnerability in Web Inspector in WebKit in Apple Safari before 4.0 allows user-assisted remote attackers to inject arbitrary web script or HTML, and read local files, via vectors related to script execution with incorrect privileges...
CVE-2009-1715
Removed by vendor...
CVE-2008-1715
SQL injection vulnerability in content/user.php in AuraCMS 2.2.1 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the country parameter...
CVE-2008-1715
creationtimestamp| type| source ---|---|--- 2008-03-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5319...
CVE-2007-1715
The CVE-2007-1715 issue affects Free Image Hosting 2.0 and earlier, with a vulnerability in frontpage.php that allows PHP code execution via a URL in the AD_BODY_TEMP parameter (remote file inclusion). The vulnerability arises from including remote files through user-controlled input, enabling ar...
CVE-2006-1715
The CVE-2006-1715 entry concerns Christian Kindahl TugZip (versions 3.4.0.0, 3.3.0.0, 3.1.0.2). The vulnerability arises in archive extraction where a dot-dot (..) path in a crafted archive pack (formats: .gz, .jar, .rar, or .zip) can lead to directory traversal, enabling a user‑assisted attacker...
CVE-2002-1715
Technical details about CVE-2002-1715 are not publicly available in the provided connected documents. The initial description notes local privilege escalation via a world-writable directory, but no vendor/version/patch specifics are present here; monitor for updates.
CVE-2005-1715
CVE-2005-1715 describes a reflected cross-site scripting vulnerability in TOPo 2.2 (version 2.2.178), specifically in index.php. The issue allows remote attackers to inject arbitrary script/HTML via several inputs in the comments section and related fields: (1) m, (2) s, (3) ID, (4) t, and (5) fi...
CVE-2004-1715
CVE-2004-1715 describes a directory traversal vulnerability in MIMEsweeper for Web (pre-5.0.4). The flaw allows reading arbitrary files via dot-dot sequences like "..\" or ".." in the URL, potentially impacting remote attackers or local users. The connected documents confirm the affected product ...
CVE-2004-1715
Directory traversal vulnerability in MIMEsweeper for Web before 5.0.4 allows remote attackers or local users to read arbitrary files via "..\", "..", and similar dot dot sequences in the URL...
CVE-2004-1715
Directory traversal vulnerability in MIMEsweeper for Web before 5.0.4 allows remote attackers or local users to read arbitrary files via "..\", "..", and similar dot dot sequences in the URL...
CVE-2002-1715
SSH 1 through 3, and possibly other versions, allows local users to bypass restricted shells such as rbash or rksh by uploading a script to a world-writeable directory, then executing that script to gain normal shell access...