CVE-2008-2197

CVE-2008-2197 is a SQL injection in the Miniweb blogwriter module 2.0. The vulnerability exposes index.php via the historymonth parameter, enabling remote attackers to execute arbitrary SQL. The NVD record lists a CVSS v2 base score of 7.5 (HIGH) with network access, no authentication, and partia...

CVE-2008-2197

SQL injection vulnerability in the blogwriter module 2.0 for Miniweb allows remote attackers to execute arbitrary SQL commands via the historymonth parameter to index.php...

openSUSE 10 Security Update : wv2 (wv2-1687)

The wv2 library was updated to fix some boundary checks which could be exploited by maliciously crafted files to access memory outside bounds and possibly execute arbitrary code. CVE-2006-2197 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

CVE-2007-2197

The CVE-2007-2197 entry describes a race condition in the NeatUpload ASP.NET component (versions 1.2.11–1.2.16, 1.1.18–1.1.23, trunk.379–trunk.445). The vulnerability allows remote attackers to obtain other clients’ HTTP responses by issuing multiple simultaneous requests, triggering multiple Flu...

CVE-2006-2197

CVE-2006-2197 concerns the wv2 library (used for accessing Microsoft Word documents). A boundary/size check issue leads to an integer overflow when processing Word files, enabling context-dependent attackers to execute arbitrary code. Multiple advisories (Ubuntu USN-300-1, Debian DSA-1100, Gentoo...

[SECURITY] [DSA 1100-1] New wv2 packages fix integer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 1100-1 [email protected] http://www.debian.org/security/ Martin Schulze June 15th, 2006 http://www.debian.org/security/faq -...

CVE-2002-2197

CVE-2002-2197 affects Sun Solaris 8.0. A local user can trigger a kernel panic by running a program that uses /dev/poll, causing a NULL pointer dereference in the kernel. The provided connected documents confirm the vulnerable component and the root cause (NULL pointer dereference via /dev/poll),...

CVE-2005-2197

The CVE-2005-2197 entry refers to a SQL injection vulnerability in sql.cls.php of Id Board 1.1.3, exploitable remotely by manipulating the f parameter to index.php. The underlying issue is improper handling of SQL queries, allowing attackers to modify query logic. According to the NVD entry, the ...

CVE-2005-2197

SQL injection vulnerability in sql.cls.php in Id Board 1.1.3 allows remote attackers to modify SQL queries, as demonstrated using the f parameter to index.php...

CVE-2004-2197

CVE-2004-2197 affects kdocker up to version 0.8. The binary kdocker.cpp fails to properly check file ownership, enabling local users to run arbitrary programs via ownership trust bypass. Affected component: kdocker.cpp in kdocker 0.1–0.8. Root cause: insufficient ownership verification. Impact: l...

CVE-2002-2197

Unknown vulnerability in Sun Solaris 8.0 allows local users to cause a denial of service kernel panic via a program that uses /dev/poll, triggering a NULL pointer dereference...