208 matches found
Mandrake Linux Security Advisory : php (MDKSA-2007:102)
A heap buffer overflow flaw was found in the xmlrpc extension for PHP. A script that implements an XML-RPC server using this extension could allow a remote attacker to execute arbitrary code as the apache user. This flaw does not, however, affect PHP applications using the pure-PHP XMLRPC class...
CVE-2007-2511
CVE-2007-2511 corresponds to a buffer overflow in PHP before 5.2.2, specifically in the user_filter_factory_create function. Several connected sources (SUSE, Ubuntu, Gentoo/OpenVAS entries) confirm this PHP5 issue and list it among a set of PHP5 vulnerabilities, with the root cause identified as ...
CVE-2006-2511
CVE-2006-2511 concerns the ActiveX version of FrontRange iHEAT. The vulnerability arises when an authenticated user uploads a file with an extension not associated with an application and selects it via the Open With dialog, potentially allowing execution of arbitrary programs or access to arbitr...
CVE-2006-2511
The ActiveX version of FrontRange iHEAT allows remote authenticated users to run arbitrary programs or access arbitrary files on the host machine by uploading a file with an extension that is not associated with an application, and selecting a file from the "Open With..." dialog...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in DCP-Portal 6.1.1 and earlier, with registerglobals enabled, allow remote attackers to inject arbitrary web script or HTML via the 1 itsurl parameter in the documents page and 2 url parameter in the sendwrite page of a index.php; 3 subject, and ...
CVE-2004-2511
CVE-2004-2511 affects DCP-Portal 5.3.2 and earlier. The issue is multiple XSS vectors in calendar.php, index.php, annou ncement.php, news.php, contents.php, search.php, and register.php via various parameters (year/month/day, cid, url, q, country, etc.). Root cause: insufficient input sanitizatio...
CVE-2005-2511
CVE-2005-2511 affects Mac OS X 10.4.2 and earlier. The issue is described as an unknown vulnerability where, when using Kerberos authentication with LDAP, an attacker could gain access to a root Terminal window. The available documents do not specify an exact root cause, vulnerable component, aff...