132 matches found
CVE-2008-2185
The CVE-2008-2185 entry describes a directory traversal vulnerability in SMartBlog (aka SMBlog) 1.3. The vulnerability is in index.php and allows remote attackers to include arbitrary local files through directory traversal sequences supplied in the page parameter. This leads to potential exposur...
CVE-2008-2185
creationtimestamp| type| source ---|---|--- 2008-05-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5535...
CVE-2007-2185
CVE-2007-2185 affects Supasite 1.23b and involves multiple PHP remote file inclusion vulnerabilities. An attacker can cause arbitrary PHP code execution by supplying a URL in the supa[db_path] parameter to files such as common_functions.php, admin_auth_cookies.php, admin_mods.php, admin_news.php,...
CVE-2006-2185
The CVE-2006-2185 entry concerns PORTAL.NLM in Novell Netware 6.5 SP5. The authenticated component writes the username and password in cleartext to the abend.log file when groupOperationsMethod fails, enabling a context-dependent attacker with access to log contents to gain privileges. The descri...
RHEL 3 : kernel (RHSA-2006:0140)
Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 3 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating syste...
CVE-2002-2185
The CVE-2002-2185 issue concerns a flaw in IGMP processing in the Linux kernel that could let a local attacker cause a denial of service by sending an IGMP membership report addressed to a target’s Ethernet address rather than the multicast group address. Public advisories (e.g., RHSA-2006:0101 a...
CVE-2005-2185
eRoom does not set an expiration for Cookies, which allows remote attackers to capture cookies and conduct replay attacks...
CVE-2004-2185
MediaWiki 1.3.5 is affected by multiple XSS vulnerabilities affecting the UnicodeConverter extension, raw page views, SpecialIpblocklist, SpecialEmailuser, SpecialMaintenance, and ImagePage. The connected documents confirm the flaws but do not provide explicit remediation steps or fixed versions....
CVE-2004-2185
Multiple cross-site scripting XSS vulnerabilities in MediaWiki 1.3.5 allow remote attackers to execute arbitrary scripts and/or SQL queries via 1 the UnicodeConverter extension, 2 raw page views, 3 SpecialIpblocklist, 4 SpecialEmailuser, 5 SpecialMaintenance, and 6 ImagePage...
CVE-2004-2185
Multiple cross-site scripting XSS vulnerabilities in MediaWiki 1.3.5 allow remote attackers to execute arbitrary scripts and/or SQL queries via 1 the UnicodeConverter extension, 2 raw page views, 3 SpecialIpblocklist, 4 SpecialEmailuser, 5 SpecialMaintenance, and 6 ImagePage...
CVE-2002-2185
The Internet Group Management Protocol IGMP allows local users to cause a denial of service via an IGMP membership report to a target's Ethernet address instead of the Multicast group address, which causes the target to stop sending reports to the router and effectively disconnect the group from...