CVE-2006-1871

CVE-2006-1871 is a SQL injection vulnerability in Oracle Database Server (versions 9.2.0.7 and 10.1.0.5) that allows remote attackers to execute arbitrary SQL commands via the DELETE_FROM_TABLE function in the DBMS_LOGMNR_SESSION (Log Miner) package. The issue is documented with an impact assessm...

CVE-2002-1871

CVE-2002-1871 concerns Sun Solaris: the pkgadd utility in Solaris 2.5.1–8 can install files with setuid/setgid root when the pkgmap entry’s mode/owner/group contain a “?” in certain fields, enabling privilege escalation. Red Hat and CVE aggregations corroborate the same description. Core details:...

CVE-2002-1871

pkgadd in Sun Solaris 2.5.1 through 8 installs files setuid/setgid root if the pkgmap file contains a "?" question mark in the 1 mode, 2 owner, or 3 group fields, which allows attackers to elevate privileges...

CVE-2005-1871

Unknown vulnerability in the privilege system in Drupal 4.4.0 through 4.6.0, when public registration is enabled, allows remote attackers to gain privileges, due to an "input check" that "is not implemented properly."...

CVE-2005-1871

CVE-2005-1871 affects Drupal 4.4.0–4.6.0 where an improperly implemented input check in the privilege system (triggered when public registration is enabled) allows remote attackers to escalate privileges. The issue is described as a privilege escalation vulnerability in multiple sources (Drupal a...

CVE-2004-1871

PhotoPost PHP Pro 4.6.x and earlier are affected by multiple cross-site scripting (XSS) vulnerabilities. Exploitation targets showmembers.php via the parameters ppuser, password, stype, perpage, sort, page, si, cat, and also the photo/album name/description fields. Affected product/version: Photo...

CVE-2004-1871

Multiple cross-site scripting XSS vulnerabilities in PhotoPost PHP Pro 4.6.x and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 ppuser, 2 password, 3 stype, 4 perpage, 5 sort, 6 page, 7 si, or 8 cat parameters to showmembers.php, or the 9 photo name, 10 photo...