110 matches found
CVE-2008-1915
CVE-2008-1915 describes a SQL injection in view.asp of DevWorx BlogWorx 1.0, exploitable via the id parameter to remotely execute arbitrary SQL. The vulnerability affects BlogWorx 1.0 as disclosed by the NVD entry, with a CVSS v2 base score of 7.5 (HIGH) indicating partial confidentiality, integr...
CVE-2008-1915
creationtimestamp| type| source ---|---|--- 2008-04-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5480...
openSUSE 10 Security Update : fbi (fbi-1915)
The fbgs program did not activate security options in the postscript interpreter due to a typo CVE-2006-3119. fbgs also used a temporary directory with predictable name CVE-2006-1695. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
CVE-2007-1915
CVE-2007-1915 concerns a buffer overflow in SAP RFC Library (versions 6.40 and 7.00 prior to 20061211) within the RFC_START_PROGRAM function. Reported as allowing remote attackers to execute arbitrary code via unspecified vectors. The description notes this information stems from a vague initial ...
CVE-2006-1915
The CVE-2006-1915 entry affects DbbS 2.0-alpha and earlier, with a vulnerability in topics.php where the fcategoryid parameter is unsafely used, enabling remote attackers to execute arbitrary SQL commands. Root cause is likely improper input handling leading to SQL injection. Impact is arbitrary ...
CVE-2005-1915
The vulnerability CVE-2005-1915 affects log4sh up to version 1.2.5, where the log4sh_readProperties function is exploitable. The root cause is a symlink attack on predictable log4sh.$$ filenames, enabling local attackers to overwrite arbitrary files. The CVSS-derived impact is low base score with...
CVE-2005-2133
CVE-2005-2133 is a duplicate of CVE-2005-1915. The connected CVE-2005-1915 describes a vulnerability in log4sh_readProperties for log4sh versions up to 1.2.5, where local users can overwrite arbitrary files via a symlink attack on predictable log4sh.$$ filenames. Affected product: log4sh (
CVE-2002-1915
The CVE-2002-1915 issue concerns multiple BSD-based operating systems where a local attacker can cause a denial of service by using flock() to lock /var/log/acculog. The Red Hat and CVE lists confirm the local-execution vector and DoS impact, with the notable detail that affected versions are not...
CVE-2004-1915
LCDproc is affected by a buffer overflow in parse_all_client_messages in versions 0.4.x up to 0.4.4, enabling remote code execution via a large number of arguments. The issue is disclosed in CVE-2004-1915 across multiple sources (NVD, CVE list, Gentoo GLSA) and corroborated by OpenVAS entries not...
