156 matches found
CVE-2010-2574
Cross-site scripting XSS vulnerability in manageprojcatadd.php in MantisBT 1.2.2 allows remote authenticated administrators to inject arbitrary web script or HTML via the name parameter in an Add Category action...
CVE-2010-2574
Cross-site scripting XSS vulnerability in manageprojcatadd.php in MantisBT 1.2.2 allows remote authenticated administrators to inject arbitrary web script or HTML via the name parameter in an Add Category action...
Secunia Research: MantisBT "Add Category" Script Insertion Vulnerability
====================================================================== Secunia Research 05/08/2010 - MantisBT "Add Category" Script Insertion Vulnerability - ====================================================================== Table of Contents Affected...
CVE-2009-2574
CVE-2009-2574 affects MiniTwitter 0.2 beta. The flaw in index.php lets remote authenticated users modify certain options of arbitrary accounts via an opt action. Exploitation is documented (Exploit-DB) and related references link to insecure parameter handling; CVSS from NVD indicates a medium ri...
CVE-2009-2574
creationtimestamp| type| source ---|---|--- 2009-05-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8587...
CVE-2008-2574
The CVE-2008-2574 entry concerns FlashBlog 0.31 beta with an Unrestricted file upload vulnerability in admin/Editor/imgupload.php. An attacker can upload a PHP file and trigger remote code execution by requesting the file under tus_imagenes/. The NVD record documents a base score of 7.5 (HIGH) wi...
CVE-2008-2574
creationtimestamp| type| source ---|---|--- 2008-06-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5728...
CVE-2007-2574
Directory traversal vulnerability in index.php in Archangel Weblog 0.90.02 allows remote attackers to read arbitrary files via a .. dot dot in the index parameter...
CVE-2007-2574
The CVE-2007-2574 entry describes a directory traversal vulnerability in Archangel Weblog 0.90.02, where an attacker can read arbitrary files by supplying a .. (dot dot) path in the index parameter of index.php. This is caused by improper validation of the index parameter, enabling access to file...
HP-UX PHCO_34568 : HP-UX Running Software Distributor Local Elevation of Privilege (HPSBUX02114 SSRT061115 rev.1)
s700800 11.00 Software Distributor SD Cumulative Patch : Potential security vulnerabilities have been identified with HP-UX running Software Distributor. These vulnerabilities could be exploited by a local authorized user to gain elevated privileges. %NASLMINLEVEL 70300 C Tenable Network Security...
CVE-2006-2574
Technical details about CVE-2006-2574 (affected product, root cause, impact, fix) are not provided in the supplied documents. Monitor for updates from HP-UX advisories and CVE records.
CVE-2004-2574
CVE-2004-2574 affects PhpGroupWare up to version 0.9.14.005 (and earlier). The vulnerability is a cross-site scripting (XSS) flaw in index.php where the date parameter in calendar.uicalendar.planner menuaction can be manipulated to inject arbitrary web script or HTML. Multiple connected sources (...
CVE-2005-2574
The CVE-2005-2574 entry concerns XMB Forum 1.9.1 where the file xmb.php “extracts and defines all provided variables,” allowing a remote attacker to modify arbitrary server variables such as _SERVER[REMOTE_ADDR] . This is a direct impact on server environment data due to improper input handling. ...
CVE-2005-2574
xmb.php in XMB Forum 1.9.1 extracts and defines all provided variables, which allows remote attackers to modify arbitrary server variables such as SERVERREMOTEADDR...
CVE-2004-2574
Cross-site scripting XSS vulnerability in index.php in phpGroupWare 0.9.14.005 and earlier allows remote attackers to inject arbitrary web script or HTML via the date parameter in a calendar.uicalendar.planner menuaction...
