CVE-2009-4865

CVE-2009-4865 affects the I-Escorts Directory Script and Agency Script, where multiple SQL injection flaws exist in escorts_search.php when magic_quotes_gpc is disabled. The vulnerability allows remote attackers to inject arbitrary SQL via the 1) search_name and 2) languages parameters. Root caus...

CVE-2009-4872

CVE-2009-4872 affects Logoshows BBS 2.0, specifically globepersonnel_login.asp. The vulnerability is multiple SQL injection flaws that allow remote attackers to execute arbitrary SQL via the username or password fields. The connected records confirm the affected component/file and the underlying ...

CVE-2009-4858

CVE-2009-4858 is an XSS vulnerability in Yahoo Answers Clone, specifically in questiondetail.php and exploitable via the questionid parameter. Remote attackers can inject arbitrary web script or HTML. The connected Red Hat, NVD, and other entries corroborate the same description; no product versi...

CVE-2009-4869

CVE-2009-4869 is an XSS vulnerability in Nasim Guest Book 1.2, specifically in index.php where the page parameter can be exploited to inject arbitrary web script or HTML. The connected Red Hat and NVD entries confirm the same issue but do not provide details on a fix or patch within the supplied ...

CVE-2009-4856

CVE-2009-4856 describes a cross-site scripting (XSS) vulnerability in the PHP Easy Shopping Cart 3.1R, specifically in subitems.php where the name parameter can be manipulated to inject arbitrary script or HTML. The vulnerability allows remote attackers to execute injected code in the context of ...

CVE-2009-4855

TYPO3 4.0 is affected by a SQL injection vulnerability in index.php via the showUid parameter. The root cause is an injectable showUid value, enabling remote attackers to alter SQL commands. The TYPO3 Security Team disputes the report, noting the showUid parameter is commonly used in third‑party ...

CVE-2009-4863

UltraPlayer Media Player Buffer Overflow (CVE-2009-4863) : Several sources confirm a stack-based buffer overflow in UltraPlayer Media Player 2.112 that allows remote code execution through a long string in a .usk file. The OpenVAS entries describe the vulnerability as affecting the UltraPlayer co...

CVE-2009-4870

CVE-2009-4870 affects PHPCityPortal's login.php; SQL injection via the req_username and req_password parameters allows remote execution of arbitrary SQL commands. Underlying issue is improper input handling in the login logic. CVSS indicates a HIGH impact with partial confidentiality, integrity, ...

CVE-2009-4857

Cross-site scripting XSS vulnerability in login.php in PHP Photo Vote 1.3F allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2009-4868

CVE-2009-4868 describes a cross-site scripting (XSS) vulnerability in Hitron Soft Answer Me 1.0. The issue allows remote attackers to inject arbitrary web script or HTML via the q_id parameter to the answers script (aka answers.php). The defect’s impact, as stated, is that an attacker can execute...

CVE-2009-4859

CVE-2009-4859 affects Online Work Order Suite (OWOS) Lite Edition 3.10. The connected documents confirm multiple cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via the show parameter to default.asp and report.asp, and via the go param...

CVE-2009-4864

CVE-2009-4864 affects the I-Escorts Directory Script and Agency Script (escorts_search.php). The issue is reflected cross-site scripting (XSS) via the parameters (1) search_name and (2) languages, enabling an attacker to inject arbitrary script/HTML in the browser. Public sources corroborate XSS ...

CVE-2009-4867

CVE-2009-4867 describes a buffer overflow in the Tuniac 090517c application triggered by a long URL in an .m3u playlist. The issue could cause a denial of service (application crash) and, possibly, execution of arbitrary code. Affected component: Tuniac (playlist URL parsing). Root cause: buffer ...

CVE-2009-4855

SQL injection vulnerability in index.php in TYPO3 4.0 allows remote attackers to execute arbitrary SQL commands via the showUid parameter. NOTE: the TYPO3 Security Team disputes this report, stating that "there is no such vulnerability... The showUid parameter is generally used in third-party TYP...

CVE-2009-4871

CVE-2009-4871 concerns Logoshows BBS 2.0. The flaw is an SQL injection in globepersonnel_forum.asp exploitable via the forumid parameter, potentially allowing remote attackers to execute arbitrary SQL commands. Affected product: Logoshows BBS 2.0 (web interface, globepersonnel_forum.asp). Underly...

CVE-2009-4872

Multiple SQL injection vulnerabilities in globepersonnellogin.asp in Logoshows BBS 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password fields...

CVE-2009-4866

The CVE-2009-4866 entry covers a Cross-site scripting (XSS) vulnerability in Matt's Script Archive (MSA) Simple Search 1.0’s search.cgi, where an attacker can inject arbitrary script or HTML via the terms parameter. The OpenVAS NASL corroborates this by listing Simple Search AS XSS vulnerability....

HP-UX PHSS_40705 : s700_800 11.11 OV NNM7.01 Intermediate Patch 13

s700800 11.11 OV NNM7.01 Intermediate Patch 13 : The remote HP-UX host is affected by multiple vulnerabilities : - A potential vulnerability has been identified with HP OpenView Network Node Manager OV NNM. The vulnerability could be exploited remotely to execute arbitrary code. HPSBMA02424...

CentOS 3 : tetex (CESA-2010:0401)

Updated tetex packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

CentOS 4 : tetex (CESA-2010:0399)

Updated tetex packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...