Lucene search
+L

90 matches found

CVE
CVE
added 2007/05/09 1:0 a.m.41 views

CVE-2007-2541

CVE-2007-2541 describes a PHP remote file inclusion in Versado CMS 1.07. The vulnerability exists in includes/ajax_listado.php where an attacker can supply a URL via the urlModulo parameter to cause remote PHP code execution. Affected component: Versado CMS 1.07, within the includes/ajax_listado....

7.5CVSS7.5AI score0.03163EPSS
Exploits1References6Affected Software1
CVE
CVE
added 2006/05/23 10:0 a.m.49 views

CVE-2006-2541

CVE-2006-2541 describes an SQL injection vulnerability in Zixforum 1.12, specifically in settings.asp. The vulnerability allows an attacker to craft the layid parameter to (1) login.asp and (2) main.asp to execute arbitrary SQL commands on the backend database. This is a remote code execution ris...

7.5CVSS8.4AI score0.02125EPSS
Exploits1References9Affected Software1
Cvelist
Cvelist
added 2006/05/23 10:0 a.m.15 views

CVE-2006-2541

SQL injection vulnerability in settings.asp in Zixforum 1.12 allows remote attackers to execute arbitrary SQL commands via the layid parameter to 1 login.asp and 2 main.asp...

8.4AI score0.02125EPSS
Exploits1References9
Debian
Debian
added 2006/05/19 10:59 p.m.33 views

[SECURITY] [DSA 1064-1] New cscope packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1064-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 19th, 2006 http://www.debian.org/security/faq -...

6.9CVSS6.5AI score0.01733EPSS
Exploits1
Cvelist
Cvelist
added 2005/08/10 4:0 a.m.47 views

CVE-2005-2541

Tar 1.15.1 does not properly warn the user when extracting setuid or setgid files, which may allow local users or remote attackers to gain privileges...

6.8AI score0.03992EPSS
Exploits0References2
CVE
CVE
added 2005/08/10 4:0 a.m.195 views

CVE-2005-2541

CVE-2005-2541 concerns Tar 1.15.1, which does not properly warn when extracting files with setuid or setgid permissions. The bulletin states this may let local users or remote attackers gain privileges. The issue is described with the affected component and the impact (privilege escalation), but ...

10CVSS9.2AI score0.03992EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2005/08/10 4:0 a.m.10 views

CVE-2005-2541

Tar 1.15.1 does not properly warn the user when extracting setuid or setgid files, which may allow local users or remote attackers to gain privileges...

6.9AI score
Exploits0References2
NVD
NVD
added 2004/12/31 5:0 a.m.21 views

CVE-2004-2541

Buffer overflow in Cscope 15.5, and possibly multiple overflows, allows remote attackers to execute arbitrary code via a C file with a long include line that is later browsed by the target...

6.9CVSS7.6AI score0.01733EPSS
Exploits1References18
OSV
OSV
added 2004/12/31 5:0 a.m.5 views

CVE-2004-2541

Buffer overflow in Cscope 15.5, and possibly multiple overflows, allows remote attackers to execute arbitrary code via a C file with a long include line that is later browsed by the target...

7.7AI score
Exploits0References18
UbuntuCve
UbuntuCve
added 2004/12/31 5:0 a.m.23 views

CVE-2004-2541

Buffer overflow in Cscope 15.5, and possibly multiple overflows, allows remote attackers to execute arbitrary code via a C file with a long include line that is later browsed by the target...

6.9CVSS6.3AI score0.01733EPSS
Exploits1References1
Rows per page
Query Builder