Lucene search
+L

91 matches found

NVD
NVD
added 2007/04/26 7:19 p.m.20 views

CVE-2007-2289

PHP remote file inclusion vulnerability in admin/includes/spaw/dialogs/insertlink.php in download engine Download-Engine 1.4.1 allows remote authenticated users to execute arbitrary PHP code via a URL in the spawroot parameter, a different vector than CVE-2007-2255. NOTE: this may be an issue in...

7.5CVSS7AI score0.01348EPSS
SaveExploits0References3
CVE
CVE
added 2007/04/26 7:00 p.m.60 views

CVE-2007-2289

CVE-2007-2289 describes a PHP remote file inclusion in Download-Engine.1.4.1, via the spaw_root parameter in admin/includes/spaw/dialogs/insert_link.php, allowing remote authenticated users to execute arbitrary PHP code. This is a different vector than CVE-2007-2255. No remediation or fix details...

7.5CVSS7.1AI score0.01348EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2007/04/26 7:00 p.m.30 views

CVE-2007-2289

PHP remote file inclusion vulnerability in admin/includes/spaw/dialogs/insertlink.php in download engine Download-Engine 1.4.1 allows remote authenticated users to execute arbitrary PHP code via a URL in the spawroot parameter, a different vector than CVE-2007-2255. NOTE: this may be an issue in...

7AI score0.01348EPSS
SaveExploits0References3
OSV
OSV
added 2006/05/10 2:14 a.m.8 views

CVE-2006-2289

Buffer overflow in avahi-core in Avahi before 0.6.10 allows local users to execute arbitrary code via unknown vectors...

7.7AI score
SaveExploits0References7
OSV
OSV
added 2006/05/10 2:14 a.m.8 views

BELL-CVE-2006-2289 CVE-2006-2289 does not affect BellSoft software

Bulletin has no description...

2.1CVSS5.8AI score0.00473EPSS
SaveExploits0References1
CVE
CVE
added 2006/05/09 11:00 p.m.55 views

CVE-2006-2289

CVE-2006-2289 is a buffer overflow vulnerability in Avahi’s avahi-core, affecting Avahi before 0.6.10. The issue allows local users to execute arbitrary code via unknown vectors due to a buffer overflow in avahi-core. Documented sources (SUSE, Ubuntu, Debian and others) describe the vulnerability...

2.1CVSS7.4AI score0.00473EPSS
SaveExploits0References6Affected Software1
CVE
CVE
added 2005/08/04 4:00 a.m.66 views

CVE-2004-2289

CVE-2004-2289 is the Windows XP Desktop.ini/ShellClassInfo variant that leads to arbitrary code execution via a .ShellClassInfo CLSID pointing to an executable. Connected docs show a related Windows Shell remote-code-execution vulnerability (CVE-2006-0012) in Windows Explorer triggered by COM obj...

10CVSS7.2AI score0.23331EPSS
SaveExploits2References7Affected Software1
NVD
NVD
added 2005/07/18 4:00 a.m.17 views

CVE-2005-2289

PHPCounter 7.2 allows remote attackers to obtain sensitive information via a direct request to prelims.php, which reveals the path in an error message...

5CVSS6.1AI score0.01373EPSS
SaveExploits0References3
CVE
CVE
added 2005/07/17 4:00 a.m.50 views

CVE-2005-2289

The CVE describes a defect in PHPCounter 7.2 where remote attackers can obtain sensitive information by requesting prelims.php directly; an error message reveals the file path. The vulnerability is an information disclosure through an error path exposure. No explicit remediation is provided in th...

5CVSS6.1AI score0.01373EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2004/12/31 5:00 a.m.17 views

CVE-2004-2289

Microsoft Windows XP Explorer allows local users to execute arbitrary code via a system folder with a Desktop.ini file containing a .ShellClassInfo specifier with a CLSID value that is associated with an executable file...

10CVSS7.2AI score0.23331EPSS
SaveExploits2References7
NVD
NVD
added 2002/12/31 5:00 a.m.22 views

CVE-2002-2289

soinfo.php in BadBlue 1.7.1 calls the phpinfo function, which allows remote attackers to gain sensitive information including ODBC passwords...

5CVSS6.5AI score0.01365EPSS
SaveExploits1References5
Rows per page
Query Builder