CVE-2008-2216

The CVE-2008-2216 entry concerns Project-Based Calendaring System (PBCS) version 0.7.1. The vulnerability is an unrestricted file upload in src/yopy_upload.php, enabling remote authenticated users to upload arbitrary files to the tmp/uploads directory. The underlying issue is a permissive file up...

CVE-2008-2216

creationtimestamp| type| source ---|---|--- 2008-04-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5523...

SuSE 10 Security Update : avahi (ZYPP Patch Number 2216)

Avahi did not check that the received netlink messages originated from the kernel. This could be used by local attackers to inject packets into avahi which could be used to inject bad netlink messages into Avahi, confusing its routing code or worse. CVE-2006-5461 %NASLMINLEVEL 70300 C Tenable...

Internet Explorer tblinf32.dll ActiveX Object Code Execution (MS07-045; CVE-2007-2216)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer IE ActiveX control tblinf32.dll. ActiveX controls are reusable software components based on Microsoft Component Object Model COM. To trigger the vulnerability, an attacker can create a malicious web page that...

CVE-2007-2216

Summary: CVE-2007-2216 affects the tblinf32.dll ActiveX control in Internet Explorer (versions 5.01, 6 SP1, 7). The vulnerability stems from an incorrect IObjectsafety implementation, enabling remote code execution when a user loads a crafted web page. The attack path involves a crafted DLL argum...

CVE-2007-2216

The tblinf32.dll aka vstlbinf.dll ActiveX control for Internet Explorer 5.01, 6 SP1, and 7 uses an incorrect IObjectsafety implementation, which allows remote attackers to execute arbitrary code by requesting the HelpString property, involving a crafted DLL file argument to the TypeLibInfoFromFil...

CVE-2006-2216

Open Bulletin Board (OpenBB) 1.0.8 is affected by a path-disclosure vulnerability. An invalid pforums parameter to misc.php and member.php can reveal the web server’s full filesystem path to remote attackers. This is a client-accessible information disclosure issue stemming from the handling of t...

CVE-2004-2216

Technical details about CVE-2004-2216 are not publicly available in the provided documents. Monitor for updates from additional sources; no specific affected products, root cause, or remediation are disclosed here.