112 matches found
CVE-2008-1888
CVE-2008-1888 describes a cross-site scripting (XSS) vulnerability in Microsoft Windows SharePoint Services 2.0. The flaw allows remote attackers to inject arbitrary web script or HTML via the Picture Source field (aka picture object source) in the Rich Text Editor. Affected product is Windows Sh...
CVE-2008-1888
creationtimestamp| type| source ---|---|--- 2008-04-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31632...
Ubuntu 6.06 LTS / 6.10 / 7.04 : php5 vulnerabilities (USN-455-1)
Stefan Esser discovered multiple vulnerabilities in the 'Month of PHP bugs'. The substrcompare function did not sufficiently verify its length argument. This might be exploited to read otherwise unaccessible memory, which might lead to information disclosure. CVE-2007-1375 The shared memory shmop...
USN-455-1: PHP vulnerabilities
Stefan Esser discovered multiple vulnerabilities in the "Month of PHP bugs". The substrcompare function did not sufficiently verify its length argument. This might be exploited to read otherwise unaccessible memory, which might lead to information disclosure. CVE-2007-1375 The shared memory shmop...
CVE-2007-1888
Buffer overflow in the sqlitedecodebinary function in src/encode.c in SQLite 2, as used by PHP 4.x through 5.x and other applications, allows context-dependent attackers to execute arbitrary code via an empty value of the in parameter. NOTE: some PHP installations use a bundled version of sqlite...
CVE-2007-1888
CVE-2007-1888 is a buffer overflow in the SQLite 2 implementation (sqlite_decode_binary in src/encode.c) used by PHP 4.x–5.x and other apps. The issue allows context-dependent attackers to execute arbitrary code via an empty value for the in parameter. The description notes that some PHP installa...
CVE-2002-1888
CommonName Toolbar 3.5.2.0 is affected. It sends unqualified domain name requests to the CommonName organization and potentially other web servers for name resolution, which can reveal internal server names to those organizations. This describes the root cause as unqualified DNS/name-resolution r...
CVE-2005-1888
Cross-site scripting XSS vulnerability in MediaWiki before 1.4.5 allows remote attackers to inject arbitrary web script via HTML attributes in page templates...
CVE-2005-1888
CVE-2005-1888 is an XSS vulnerability in MediaWiki prior to 1.4.5 where remote attackers can inject arbitrary script via HTML attributes in page templates. The SUSE entry confirms the same description; other connected documents reiterate the vulnerability without new technical details. Exploit sp...
CVE-2004-1888
CVE-2004-1888 affects Aborior Encore WebForum: the display.cgi component allows remote command execution through shell metacharacters in the file parameter. The vulnerability is network‑level with no authentication required per the description, enabling an attacker to run arbitrary commands with ...
