CVE-2010-2669

Orbis CMS 1.0.2 is affected by a cross-site scripting (XSS) vulnerability in admin/editors/text/editor-body.php, exploitable via the s parameter. The issue is documented across multiple sources (NVD entry CVE-2010-2669 and OpenVAS/NVD references) and is tied to the editor-body.php component. The ...

CVE-2010-2669

creationtimestamp| type| source ---|---|--- 2010-07-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34253...

IBM AIX 5.66.1 - _LIB_INIT_DBG Arbitrary File Overwrite via Libc Debug

IBM AIX 5.66.1 - LIBINITDBG Arbitrary File Overwrite via Libc Debug !/bin/sh $Id: raptorlibC,v 1.1 2009/09/10 15:08:04 raptor Exp $ raptorlibC - AIX arbitrary file overwrite via libC debug Copyright c 2009 Marco Ivaldi Property of @ Mediaservice.net Srl Data Security Division...

IBM AIX 5.6/6.1 - '_LIB_INIT_DBG' Arbitrary File Overwrite via Libc Debug

!/bin/sh $Id: raptorlibC,v 1.1 2009/09/10 15:08:04 raptor Exp $ raptorlibC - AIX arbitrary file overwrite via libC debug Copyright c 2009 Marco Ivaldi Property of @ Mediaservice.net Srl Data Security Division http://www.mediaservice.net/ http://lab.mediaservice.net/ DON'T RUN THIS UNLESS YOU KNOW...

CVE-2009-2669

creationtimestamp| type| source ---|---|--- 2009-09-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9645...

CVE-2009-2669

CVE-2009-2669 affects IBM AIX 5.3 and 6.1 where a debugging component in the XL C/C++ runtime mishandles the _LIB_INIT_DBG and _LIB_INIT_DBG_FILE environment variables, enabling local privilege escalation by a setuid-root program to create an arbitrary root-owned file with world-writable permissi...

CVE-2008-2669

CVE-2008-2669 affects yBlog 0.2.2.2 and involves multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands via parameter inputs: (1) q in search.php, (2) n in user.php, or (3) n in uss.php. The NVD entry lists these as the exposed vectors with a base sco...

CVE-2004-2669

CVE-2004-2669 affects Land Down Under (LDU) v701 and enables multiple SQL injection vectors via PHP parameters: s, w, d in users.php; id in comments.php; rusername in auth.php; h in plug.php. Root cause is unsafely-constructed SQL queries with user input, allowing remote execution of arbitrary SQ...

CVE-2006-2669

The CVE-2006-2669 entry describes multiple cross-site scripting (XSS) vulnerabilities in Pre Shopping Mall 1.0, exploitable via (1) search.php (search box), (2) detail.php (prodid parameter), and (3) products.php (cid parameter). The NVD notes impact as partial integrity impact with medium severi...

CVE-2005-2669

CVE-2005-2669 affects Computer Associates Message Queuing Service (CAM/CAFT): vulnerable in CAM versions 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13. The root cause is a stack overflow in the remote service’s log_security function, which may allow an unauthenticated attacker to ex...