CVE-2009-4925

Multiple SQL injection vulnerabilities in Portale e-commerce Creasito aka creasito e-commerce content manager 1.3.16, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the username parameter to 1 admin/checkuser.php and 2 checkuser.php...

Fedora Update for libtool FEDORA-2010-10640

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2009-3672

creationtimestamp| type| source ---|---|--- 2010-07-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16547 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ms09072styleobject.rb 2025-02-06 03:13:39+00:00|...

Fedora Update for gcc FEDORA-2010-10640

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2009-4933

Multiple SQL injection vulnerabilities in login.php in EZ Webitor are documented under CVE-2009-4933. The issue is triggered by unvalidated input in two parameters, txtUserId (Username) and txtPassword (Password), allowing remote attackers to execute arbitrary SQL commands. The description consis...

CVE-2009-4930

Cross-site scripting XSS vulnerability in the twbkwbis.PSecurityQuestion aka Change Security Question page in SunGard Banner Student System 7.4 allows remote attackers to inject arbitrary web script or HTML via the New Question field...

CVE-2009-4928

CVE-2009-4928 describes a PHP remote file inclusion vulnerability in TotalCalendar 2.4, where an attacker can cause arbitrary PHP code execution via a URL in the inc_dir parameter of config.php. The entry notes a distinct vector from CVE-2006-1922 and CVE-2006-7055. The provided documents reitera...

CVE-2009-4932

CVE-2009-4932 corresponds to a stack-based buffer overflow in the 1by1 player (version 1.67 / 1.6.7.0) triggered by a long string in an .m3u playlist file. The vulnerability allows remote attackers to cause an application crash (denial of service) and potentially execute arbitrary code on affecte...

CVE-2009-4935

The CVE-2009-4935 entry concerns a SQL injection in Online Guestbook Pro, specifically ogp_show.php via the display parameter. The root cause is improper handling of user input in that parameter, enabling attackers to craft arbitrary SQL commands. Impact per CVSS indicates partial disclosure, mod...

CVE-2009-4927

CVE-2009-4927 affects WB News 2.1.2. An authentication bypass is possible by modifying the WBNEWS cookie (set to 1), allowing remote attackers to gain administrative access. The NVD entry and related records confirm a network-exposed vulnerability with a base CVSS v2 score of 7.5 (HIGH) and impac...

CVE-2009-4934

The CVE-2009-4934 entry describes a Cross-site Scripting (XSS) vulnerability in Online Photo Pro 2.0, specifically in index.php, exploitable via the section parameter. Affected software/component: Online Photo Pro 2.0 (index.php). Root cause as stated: unsanitized input in the section parameter l...

CVE-2009-4933

Multiple SQL injection vulnerabilities in login.php in EZ Webitor allow remote attackers to execute arbitrary SQL commands via the 1 txtUserId Username and 2 txtPassword Password parameters. NOTE: some of these details are obtained from third party information...

CVE-2009-4930

CVE-2009-4930 describes a cross-site scripting (XSS) vulnerability in the SunGard Banner Student System 7.4, specifically the twbkwbis.P_SecurityQuestion (Change Security Question) page. The vulnerability allows remote attackers to inject arbitrary web script or HTML through the New Question fiel...

CVE-2009-4931

CVE-2009-4931 describes a stack-based buffer overflow in Groovy Media Player 1.1.0 triggered by a long string in an .m3u playlist, allowing remote attackers to cause an application crash or potentially execute arbitrary code. Multiple sources (NVD, OpenVAS NASL entries) corroborate the condition ...

CVE-2009-4928

PHP remote file inclusion vulnerability in config.php in TotalCalendar 2.4 allows remote attackers to execute arbitrary PHP code via a URL in the incdir parameter, a different vector than CVE-2006-1922 and CVE-2006-7055...

CVE-2009-4929

TotalCalendar 2.4 is affected. The vulnerability is in admin/manage_users.php which does not require administrative authentication, allowing remote attackers to change arbitrary passwords via the newPW1/newPW2 parameters. CVSSv2 base score is 7.5 (HIGH) with network attack vector, no authenticati...

CVE-2009-4926

CVE-2009-4926 concerns Online Contact Manager (formerly EContact PRO) 3.0, which has multiple XSS vulnerabilities. The issue is exploitable via the showGroup parameter to index.php and via the id parameter to view.php, email.php, edit.php, and delete.php, enabling remote attackers to inject arbit...

Saeculum 2009 Multiple SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================== Saeculum 2009 Multiple SQL Injection Vulnerability ================================================== + Author: TeaM MosTa + Software Link:http://www.saeculum.tv/ + Tested on Win Xp Sp2/Sp3...

Fixed in Apache Tomcat 6.0.28

Important: Remote Denial Of Service and Information Disclosure Vulnerability CVE-2010-2227 Several flaws in the handling of the 'Transfer-Encoding' header were found that prevented the recycling of a buffer. A remote attacker could trigger this flaw which would cause subsequent requests to fail...

Fedora 12 : gcc-4.4.4-10.fc12 / libtool-2.2.6-18.fc12.1 (2010-10640)

The remote Fedora host is missing one or more security updates : gcc-4.4.4-10.fc12 : - Wed Jun 30 2010 Jakub Jelinek 4.4.4-10 - update from gcc-44-branch - PRs fortran/43841, fortran/43843, tree-optimization/44683 - fix qualified-id as template argument handling 605761, PR c++/44587 -...