CVE-2008-1976

CVE-2008-1976 describes multiple cross-site scripting (XSS) vulnerabilities in the Drupal modules Internationalization (i18n) 5.x before 5.x-2.3 and 5.x-1.1, and 6.x before 6.x-1.0 beta 1; and Localizer 5.x before 5.x-3.4, 5.x-2.1, and 5.x-1.11. The flaws allow remote attackers to inject arbitrar...

CVE-2007-1976

PHP remote file inclusion vulnerability in index.php in the Virii Info 1.10 and earlier module for Xoops allows remote attackers to execute arbitrary PHP code via a URL in the xoopsConfigrootpath parameter. NOTE: the issue has been disputed by a reliable third party, stating that the application'...

CVE-2007-1976

CVE-2007-1976 describes a PHP remote file inclusion vulnerability in the Virii Info module for Xoops (versions 1.10 and earlier). An attacker could trigger arbitrary PHP code execution by supplying a crafted URL via the xoopsConfig[root_path] parameter in index.php. The issue is noted as being di...

CVE-2005-1976

Novell NetMail 3.5.2a, 3.5.2b, and 3.5.2c running on Linux reportedly set the owner and group of certain files to 500, which could allow users or groups with that ID to modify those files and potentially execute arbitrary code or cause a denial of service. The Red Hat advisory confirms this behav...

CVE-2006-1976

PRB Beta 1’s addRequest.php is vulnerable to cross-site scripting (XSS) via the Request field, allowing remote attackers to inject arbitrary web script or HTML. Affected version: PRB Beta 1 before 20060320. The available documents do not provide exploit details, impact beyond script injection, or...

CVE-2004-1976

The CVE-2004-1976 entry concerns SMC Barricade broadband routers (models 7008ABR and 7004VBR). The described vulnerability is that remote administration is enabled by default, allowing remote attackers to gain access by connecting to port 1900. The available documents confirm the affected devices...

CVE-2004-1976

SMC Barricade broadband router 7008ABR and 7004VBR enable remote administration by default, which allows remote attackers to gain access by connecting to port 1900...

CVE-2002-1976

ifconfig, when used on the Linux kernel 2.2 and later, does not report when the network interface is in promiscuous mode if it was put in promiscuous mode using PACKETMRPROMISC, which could allow attackers to sniff the network without detection, as demonstrated using libpcap...

CVE-2002-1976

ifconfig, when used on the Linux kernel 2.2 and later, does not report when the network interface is in promiscuous mode if it was put in promiscuous mode using PACKETMRPROMISC, which could allow attackers to sniff the network without detection, as demonstrated using libpcap...