Debian: Security Advisory (DSA-1963-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-1963

CVE-2009-1963 affects Oracle Database 11.1.0.6 in the Network Foundation (Oracle Net). The vulnerability is described as an unspecified issue that allows remote authenticated users to impact integrity and availability via unknown vectors. The CVSS v2 base score is 7.5 (HIGH) with network access, ...

CVE-2009-1963

creationtimestamp| type| source ---|---|--- 2009-06-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33080...

Immunity Canvas: GRAPE_INCLUDE

Name| grapeinclude ---|--- CVE| CVE-2008-1963 Exploit Pack| CANVAS Description| Grape Web Statistics Remote File include Notes| CVE Name: CVE-2008-1963 VENDOR: Quate Repeatability: Infinite References: http://www.securityfocus.com/bid/28838 CVE Url: https://vulners.com/cve/CVE-2008-1963 CVSS: 7.5...

CVE-2008-1963

CVE-2008-1963 affects Quate Grape Web Statistics 0.2a. A PHP remote file inclusion flaw in includes/functions.php can let an attacker supply a URL in the location parameter to execute arbitrary PHP code. The NVD entry reports a base score of 7.5 (HIGH) with network attack vector and no authentica...

CVE-2008-1963

creationtimestamp| type| source ---|---|--- 2008-04-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5463...

CVE-2007-1963

SQL injection vulnerability in the createsession function in classsession.php in MyBB aka MyBulletinBoard 1.2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the Client-IP HTTP header, as utilized by index.php, a related issue to CVE-2006-3775...

CVE-2007-1963

CVE-2007-1963 describes an SQL injection in MyBB (MyBulletinBoard) up to version 1.2.3, exploitable through the Client-IP HTTP header in the create_session function of class_session.php. The vulnerability permits remote SQL commands and is a related issue to CVE-2006-3775. The initial description...

CVE-2006-1963

Directory traversal vulnerability in main.php in PCPIN Chat 5.0.4 and earlier allows remote authenticated users to include and execute arbitrary PHP code via a ".." dot dot in a language cookie, as demonstrated by uploading then accessing a smiliefile image that actually contains PHP code...

CVE-2002-1963

The CVE-2002-1963 entry affects Linux kernel versions 2.4.1–2.4.19. The root cause is that the NR_RESERVED_FILES limit is set to 10, enabling local users to exhaust resources by opening 10 setuid binaries, causing a denial of service. Publicly provided documents confirm the affected kernel range ...

CVE-2005-1963

CVE-2005-1963 affects Cerberus Helpdesk 0.97.3. It enables remote attackers to obtain sensitive information by crafting requests to reports.php, knowledgebase.php, or configuration.php, with the leakage exposed in a PHP error message. The available sources confirm an information disclosure vulner...

CVE-2004-1963

CVE-2004-1963 discusses a vulnerability in Network Query Tool (NQT) 1.6 where the nqt.php handling of the portNum parameter leads to an error message that reveals the full filesystem path, potentially exposing sensitive information to remote attackers. The affected software is NQT; the vulnerable...