CVE-2010-2577

Pligg CMS prior to version 1.1.1 contains multiple SQL injection vulnerabilities. Specifically, the title parameter in storyrss.php and story.php is unsafely handled, allowing remote attackers to execute arbitrary SQL commands. Root cause: improper input handling leads to SQL injection. Affected ...

CVE-2010-3013

SQL injection vulnerability in groupadmin.php in Pligg before 1.1.1 allows remote attackers to execute arbitrary SQL commands via the role parameter, a different vulnerability than CVE-2010-2577...

Pligg Multiple SQL Injection Vulnerabilities

The host is running Pligg CMS and is prone to multiple SQL injection vulnerabilities. OpenVAS Vulnerability Test $Id: gbpliggmultsqlinjvuln.nasl 5373 2017-02-20 16:27:48Z teissa $ Pligg Multiple SQL Injection Vulnerabilities Authors: Sooraj KS Upadated By: Antu Sanadi on 2010-08-16 - Added the...

Opera Unicode String Denial Of Service Vulnerability (Linux)

This host is installed with Opera and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: secpodoperaunicodestrdosvulnlin.nasl 5122 2017-01-27 12:16:00Z teissa $ Opera Unicode String Denial Of Service Vulnerability Linux Authors: Sharath S Updated for New CVE's - By Shara...

CVE-2009-2577

CVE-2009-2577 is an Opera Unicode String Denial of Service vulnerability affecting Opera 9.52 and earlier. The issue allows a remote attacker to trigger a Denial of Service by supplying a long Unicode string argument to the write method, leading to CPU/memory consumption and an application hang. ...

CVE-2008-2577

CVE-2008-2577 is an unspecified privilege-escalation issue in Oracle BEA WebLogic Server 9.2 MP1. Connected sources identify the vulnerability as affecting the WebLogic Console and WLST component, with the BEA/Oracle WebLogic Server entry listing “Console or WLST user” as the affected vector and ...

CVE-2007-2577

CVE-2007-2577 describes multiple SQL injection vulnerabilities in ACP3 4.0 beta 3. The affected components are: feeds.php (mode parameter), news/list/index.php and certain news/details/id_*/action_create/index.php (form[cat]), and search/list/action_search/index.php (form[mods][]). Successful exp...

CVE-2006-2577

Docebo in Docebo LMS 3.0.3 and earlier is affected by multiple PHP remote file inclusion vulnerabilities that can let an attacker execute arbitrary PHP code. The issue arises when PHP register_globals is enabled and an attacker can supply a URL via the parameters where_cms, where_lms, where_upgra...

CVE-2005-2577

Wyse Winterm 1125SE devices running firmware 4.2.09f or 4.4.061f are reported vulnerable to a remote denial of service via a crafted IP packet with a zero in the IP option length field, per CVE-2005-2577. The vulnerability targets the device’s network stack and can cause a crash without requiring...

CVE-2004-2577

The aclcheck function in phpGroupWare 0.9.16RC2 always returns True, even when mkdir does not behave as expected, which could allow remote attackers to obtain sensitive information via WebDAV from users' home directories that lack .htaccess files, and possibly has other unknown impacts...