94 matches found
CVE-2010-2699
CVE-2010-2699 : There is a SQL injection in Edge PHP Clickbank Affiliate Marketplace Script (CBQuick) via the search parameter in index.php. The root cause is improper input handling in the search field, allowing remote attackers to execute arbitrary SQL commands. Affected software is CBQuick’s i...
CVE-2010-2699
creationtimestamp| type| source ---|---|--- 2010-07-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14322...
CVE-2009-2699
The vulnerability CVE-2009-2699 affects the Solaris pollset feature in the Event Port backend (poll/unix/port.c) of the Apache Portable Runtime (APR) library prior to 1.3.9, as used by Apache HTTP Server prior to 2.2.14 and other products. The issue arises from improper error handling in the Sola...
Security fix for the ALT Linux 9 package apache2 version 2.2.14-alt1
Oct. 6, 2009 Aleksey Avdeev 2.2.14-alt1 - 2.2.14 - Security fixes CVE-2009-2412, CVE-2009-2699, CVE-2009-3094, CVE-2009-3095 - Update patchsets: + itk for apache2.2-mpm-itk-2.2.11-02 Closes: 21486 + peruser for httpd-2.2.3-peruser-0.3.0-dc3...
Security fix for the ALT Linux 10 package apache2 version 2.2.14-alt1
Oct. 6, 2009 Aleksey Avdeev 2.2.14-alt1 - 2.2.14 - Security fixes CVE-2009-2412, CVE-2009-2699, CVE-2009-3094, CVE-2009-3095 - Update patchsets: + itk for apache2.2-mpm-itk-2.2.11-02 Closes: 21486 + peruser for httpd-2.2.3-peruser-0.3.0-dc3...
Security fix for the ALT Linux 8 package apache2 version 2.2.14-alt1
Oct. 6, 2009 Aleksey Avdeev 2.2.14-alt1 - 2.2.14 - Security fixes CVE-2009-2412, CVE-2009-2699, CVE-2009-3094, CVE-2009-3095 - Update patchsets: + itk for apache2.2-mpm-itk-2.2.11-02 Closes: 21486 + peruser for httpd-2.2.3-peruser-0.3.0-dc3...
CVE-2008-2699
Galatolo WebManager (GWM) 1.0 is affected by directory traversal vulnerabilities that allow remote attackers to include and execute arbitrary local files via directory traversal sequences in (1) the plugin parameter to admin/plugins.php or (2) the com parameter to index.php. This is documented in...
CVE-2008-2699
creationtimestamp| type| source ---|---|--- 2008-06-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5758...
CVE-2004-2699
CVE-2004-2699 : deleteicon.aspx in AspDotNetStorefront 3.3 allows an unauthenticated remote attacker to delete arbitrary product images by modifying the ProductID parameter. This affects image integrity (partial impact) per the NVD CVSS2 vector (AV:N/AC:M/Au:N/C:N/I:P/A:N) with a base score of 4....
CVE-2007-2699
The CVE-2007-2699 entry concerns BEA WebLogic Express/Server 9.0/9.1 where the Administration Console fails to enforce Domain Security Policies, allowing remote administrative users in the Deployer role to upload arbitrary files. The connected documents indicate an abuse scenario via the WebLogic...
CVE-2006-2699
Cross-site scripting XSS vulnerability in getimage.php in Geeklog 1.4.0sr2 and earlier allows remote attackers to inject arbitrary HTML or web script via the image argument in a show action...
CVE-2006-2699
Geokay: CVE-2006-2699 is a documented Cross-site Scripting (XSS) vulnerability in Geeklog 1.4.0sr2 and earlier. The flaw exists in getimage.php’s show action where the image parameter can be exploited to inject arbitrary HTML or web script, enabling remote attackers to run injected content in a v...
CVE-2005-2699
CVE-2005-2699 concerns PHP-Kit 1.6.1 where an unrestricted file upload in admin/admin.php via images.php allows uploading a .php file to content/images/ and executing arbitrary PHP code. The vulnerability requires the attacker to be a remote authenticated administrator, implying privilege within ...