89 matches found
CVE-2008-2070
creationtimestamp| type| source ---|---|--- 2008-05-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31771 2008-05-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31772 2008-05-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31773...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools SunShop Shopping Cart 4.0 allow remote attackers to execute arbitrary PHP code via a URL in the abspath parameter to 1 include/payment/payflowpro.php, 2 global.php, or 3 libsecure.php, different vectors than CVE-2007-2070...
CVE-2007-2070
Turnkey Web Tools SunShop Shopping Cart is affected by CVE-2007-2070 due to multiple PHP remote file inclusion vulnerabilities. The flaw allows an attacker to trigger arbitrary PHP code execution by supplying a crafted URL in the abs_path parameter to index.php or checkout.php. The issue affects ...
CVE-2006-2070
CVE-2006-2070 describes a cross-site scripting (XSS) vulnerability in DevBB 1.0.0 and earlier. The vulnerable component is member.php in the viewpro action, where the member parameter leads to script/HTML injection. The vulnerability enables remote attackers to inject arbitrary web script or HTML...
SUSE-SA:2005:038: clamav
The remote host is missing the patch for the advisory SUSE-SA:2005:038 clamav. This security update upgrades the Clamav virus scan engine to the version 0.68.1. Among other bugfixes and improvements, this update fixes a bug in the Quantum decompressor routines that can be used for a remote denial...
Debian DSA-737-1 : clamav - remote denial of service
A number of potential remote denial of service vulnerabilities have been identified in ClamAV. In addition to the four issues identified by CVE ID above, there are fixes for issues in libclamav/cvd.c and libclamav/message.c. Together, these issues could allow a carefully crafted message to crash ...
CVE-2005-2070
CVE-2005-2070 affects the ClamAV Mail fILTER (clamav-milter) when used with Sendmail and long timeouts. Affected versions: 0.84–0.85d; vulnerability allows remote attackers to cause a denial of service by keeping an open connection, preventing ClamAV from reloading. Debian/DSA-737-1 recommendatio...
CVE-2004-2070
CVE-2004-2070 affects the Altiris Client Service for Windows 5.6 SP1 Hotfix E (5.6.181). Local users can execute arbitrary commands by opening the AClient tray icon and using the View Log File option. This vulnerability is explicitly described as different from CVE-2005-1590. No remediation detai...
