79 matches found
GroupWise Internet Agent < 8.0.2 HP3 Multiple Vulnerabilities
The version of Novell GroupWise Internet Agent running on the remote host is earlier than 8.0.2 HP3. Such versions are potentially affected by multiple issues : - Multiple denial of service issues exist because the application does not adequately verify user-supplied inputs. CVE-2011-2218,...
Debian DSA-2219-1 : xmlsec1 - arbitrary file overwrite
Nicolas Gregoire discovered that the XML Security Library xmlsec allowed remote attackers to create or overwrite arbitrary files through specially crafted XML files using the libxslt output extension and a ds:Transform element during signature verification. %NASLMINLEVEL 70300 C Tenable Network...
CVE-2010-2219
Adobe Flash Media Server (FMS) is affected by CVE-2010-2219 in versions before 3.0.6 and 3.5.x before 3.5.4, enabling a denial of service via memory consumption through unknown vectors. The provided documents do not specify exploit details, affected platform scope beyond FMS versions, or a vendor...
Adobe Flash Media server < 3.0.6 / 3.5.4 Multiple Vulnerabilities (APSB10-19)
Binary data 5624.prm...
CVE-2009-2219
Multiple cross-site scripting XSS vulnerabilities in phpCollegeExchange 0.1.5c allow remote attackers to inject arbitrary web script or HTML via the 1 SESSIONhandle parameter to a home.php, b books/allbooks.php, or c books/home.php; or the 2 home parameter to d ihead.php or e inav.php, or f...
CVE-2009-2219
CVE-2009-2219 : The connected records show concrete details. Multiple XSS vulnerabilities affect phpCollegeExchange 0.1.5c. Attackers can inject arbitrary web script or HTML through input vectors in the PHP files under the books/ directory: (1) _SESSION[handle] in home.php, books/allbooks.php, an...
CVE-2009-2219
creationtimestamp| type| source ---|---|--- 2009-06-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9008...
CVE-2008-2219
Cross-site scripting XSS vulnerability in install.php in C-News.fr C-News 1.0.1 allows remote attackers to inject arbitrary web script or HTML via the etape parameter...
CVE-2008-2219
CVE-2008-2219 is a cross-site scripting (XSS) vulnerability affecting C-News.fr C-News 1.0.1. The issue resides in install.php, where an attacker can inject arbitrary web script or HTML through the etape parameter. The provided documents do not specify a patch or mitigation, exploit details, or a...
Design/Logic Flaw
Hosting Controller 6.1 Hot fix 3.3 and earlier 1 allows remote attackers to change arbitrary user profiles via a request to Hosting/Addreseller.asp with modified loginname and email parameters; and 2 allows remote authenticated users to change a credit amount and increase a discount via an...
CVE-2007-2219
CVE-2007-2219 is a remote code-execution flaw in the Win32 API present on Windows 2000 SP4, XP SP2, and Server 2003 SP1/SP2. The vulnerability stems from improper validation of parameters passed to a Win32 API function, enabling an attacker to execute arbitrary code by convincing a user to view a...
Microsoft Windows Win32 API Code Execution (MS07-035; CVE-2007-2219)
Microsoft Win32 API application programming interface provides 32-bit services used by all Windows-based applications.A remote code execution vulnerability has been reported in the Microsoft Windows implementation of Win32 API.Remote attacker could exploit this issue by convincing a user to visit...
CVE-2006-2219
phpBB 2.0.20 does not verify user-specified input variable types before being passed to type-dependent functions, which allows remote attackers to obtain sensitive information, as demonstrated by the 1 mode parameter to memberlist.php and the 2 highlight parameter to viewtopic.php that are used a...
CVE-2006-2219
phpBB 2.0.20 does not verify user-specified input variable types before being passed to type-dependent functions, which allows remote attackers to obtain sensitive information, as demonstrated by the 1 mode parameter to memberlist.php and the 2 highlight parameter to viewtopic.php that are used a...
CVE-2006-2219
Summary: CVE-2006-2219 affects phpBB 2.0.20 . The issue arises because user-supplied input variable types are not verified before being passed to type-dependent functions, enabling information disclosure via error messages. Demonstrated with the mode parameter to memberlist.php and the highlight ...
CVE-2002-2219
The CVE pertains to chetcpasswd.cgi in Pedro Lineu Orso chetcpasswd prior to version 2.1, where a flaw in the handling of a long user ID field enables remote disclosure of the last line of the /etc/shadow file. The vulnerability is an information disclosure via an unintended read of shadow data, ...
CVE-2004-2219
The CVE-2004-2219 issue affects Microsoft Internet Explorer, specifically IE6, with a vulnerability in the address bar update method. CPAI-2015-1219 attributes the root cause to incorrect handling of unknown protocol handlers, enabling a sequence of steps in IE to make attacker-supplied content a...
CVE-2005-2219
CVE-2005-2219 affects Hosting Controller 6.1 Hotfix 2.1. Remote authenticated users can perform unauthorized actions by sending a direct request to AccountActions.asp and modifying the CreditLimit parameter in the UpdateCreditLimit action, enabling changes to user credit limits. The linked Red Ha...
