116 matches found
CVE-2008-2510
CVE-2008-2510 is a SQL injection vulnerability in the WordPress Upload File plugin, specifically in wp-uploadfile.php, where the f_id parameter enables remote attackers to execute arbitrary SQL commands. The issue is documented across multiple sources (NVD/NVD list and patch coverage) as affectin...
CVE-2008-2510
creationtimestamp| type| source ---|---|--- 2008-05-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31836...
Debian Security Advisory DSA 1295-1 (php5)
The remote host is missing an update to php5 announced via advisory DSA 1295-1. OpenVAS Vulnerability Test $Id: deb12951.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1295-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
SuSE 10 Security Update : PHP5 (ZYPP Patch Number 3754)
The following issues have been fixed : - missing openbasedir and safemode restriction. CVE-2007-3007 - chunksplit integer overflow. CVE-2007-2872 - DoS condition in libgd's image processing. CVE-2007-2756 - possible super-global overwrite inside importrequestvariables. CVE-2007-1396 - buffer...
openSUSE 10 Security Update : php5 (php5-3753)
The following issues have been fixed in PHP, which were spotted by the MOPB project or fixed in PHP 5.2.3 release : - missing openbasedir and safemode restriction CVE-2007-3007 - chunksplit integer overflow CVE-2007-2872 - DoS condition in libgd's image processing CVE-2007-2756 - possible...
Fedora Core 6 : php-5.1.6-3.6.fc6 (2007-503)
This update fixes a number of security issues in PHP. A heap buffer overflow flaw was found in the PHP 'xmlrpc' extension. A PHP script which implements an XML-RPC server using this extension could allow a remote attacker to execute arbitrary code as the 'apache' user. Note that this flaw does no...
Mandrake Linux Security Advisory : php (MDKSA-2007:102)
A heap buffer overflow flaw was found in the xmlrpc extension for PHP. A script that implements an XML-RPC server using this extension could allow a remote attacker to execute arbitrary code as the apache user. This flaw does not, however, affect PHP applications using the pure-PHP XMLRPC class...
CVE-2007-2510
Buffer overflow in the makehttpsoaprequest function in PHP before 5.2.2 has unknown impact and remote attack vectors, possibly related to "/" slash characters...
CVE-2007-2510
CVE-2007-2510 describes a buffer overflow in the PHP function make_http_soap_request for PHP versions before 5.2.2. The impact is listed as unknown, with remote attack vectors and an exploitation potential tied to how the slash character is handled. The NVD metrics assign a base score of 5.1 (Med...
CVE-2004-2510
Cross-site scripting XSS vulnerability in showflat.php in Infopop UBB.Threads before 6.5 allows remote attackers to inject arbitrary web script or HTML via the Cat parameter...
CVE-2004-2510
CVE-2004-2510 represents a cross-site scripting vulnerability in Infopop UBB.Threads, tracked with multiple sources. The flaw resides in showflat.php and can be triggered via the Cat parameter, allowing injection of arbitrary script/HTML. Affected products are Infopop UBB.Threads prior to version...
CVE-2005-2510
The Server Admin tool in servermgripfilter for Mac OS X 10.4 to 10.4.2, when using multiple subnets and Address Groups, does not always properly write firewall rules to the Active Rules when certain conditions occur, which could result in firewall policies that are less restrictive than intended ...
CVE-2005-2510
CVE-2005-2510 affects Mac OS X 10.4–10.4.2: The Server Admin tool (servermgr_ipfilter) may fail to correctly write firewall rules to Active Rules when using multiple subnets and Address Groups, potentially resulting in policies that are less restrictive than intended. Impact is limited to local a...
Unsecure Ftpd on HP PSC 2510 Printer
Product Name: HP PSC 2510 Summary: Ftp print service is not configurable This printer comes with an ftp daemon which allows anonymous access, and drops the user into a write only directory. By default anyone from anywhere can drop a file into this directory and the printer will print the document...