107 matches found
CVE-2006-2039
CVE-2006-2039 : The osTicket component of Help Center Live prior to 2.1.0 contains multiple SQL injection flaws that allow remote attackers to execute arbitrary SQL commands via unknown vectors. Affected software: Help Center Live with embedded osTicket prior to 2.1.0. Impact described in connect...
CVE-2002-2039
In QNX RTOS versions 4.25 and 6.1.0, /bin/su allows local users to read sensitive information from core dump files by sending SIGSERV (invalid memory reference); impact is partial confidentiality. The description notes the local privilege/impact but does not provide exploitable details, affected ...
CVE-2005-2039
CVE-2005-2039 affects NanoBlogger 3.2.1 and earlier, with unknown vulnerability in various plugins that allows remote attackers to execute arbitrary commands. The connected documents confirm the affected product/versions and the impact (remote code execution) but do not provide specific root caus...
CVE-2005-2039
Unknown vulnerability in "various plugins" for NanoBlogger 3.2.1 and earlier allows remote attackers to execute arbitrary commands...
CVE-2004-2039
CVE-2004-2039 affects e107 0.615. Remote attackers could trigger direct requests to specific PHP files (alt_news.php, backend_menu.php, clock_menu.php, counter_menu.php, login_menu.php, etc.) and cause PHP error messages that disclose the full server path, enabling information disclosure. The ava...
CVE-2004-2039
e107 0.615 allows remote attackers to obtain sensitive information via a direct request to 1 altnews.php, 2 backendmenu.php, 3 clockmenu.php, 4 countermenu.php, 5 loginmenu.php, and other files, which reveal the full path in a PHP error message...