CVE-2008-2571

CVE-2008-2571 details (MODE C): LimeSurvey (formerly PHPSurveyor) is affected by a CSRF vulnerability in the quota-management workflow. Specifically, an attacker can abuse a CSRF flaw in the “modify quota” action to cause an administrator’s quotas to be changed. The vulnerability is described as ...

CVE-2007-2571

CVE-2007-2571 affects the wfquotes 1.0 0 module for XOOPS, with the vulnerability located in index.php. The issue is an SQL injection via the c parameter in a cat action, enabling remote attackers to execute arbitrary SQL commands. Exploitation details are not included in the provided documents; ...

CVE-2006-2571

The CVE-2006-2571 entry refers to an XSS vulnerability in Alkacon OpenCms (versions 6.0.0, 6.0.2, 6.0.3) where arbitrary web script/HTML can be injected through the query parameter in a search action on search.html. This is triggered remotely via the vulnerable search feature, enabling script exe...

CVE-2004-2571

EnderUNIX isoqlog 2.1.1 is affected by multiple buffer overflow defects allowing remote code execution via Parser.c functions: parseQmailFromBytesLine, parseQmailToRemoteLine, parseQmailToLocalLine, parseSendmailFromBytesLine, parseSendmailToLine, parseEximFromBytesLine, and parseEximToLine; and ...

CVE-2005-2571

FunkBoard 0.66CF (and possibly earlier) has an access-control flaw: the admin/mysql_install.php and admin/pg_install.php scripts are not properly restricted, allowing an attacker to obtain the database username and password or inject arbitrary PHP code into info.php. The issue is described as a l...