146 matches found
CVE-2009-2819
CVE-2009-2819 affects Apple Mac OS X 10.5.8 where the AFP Client has multiple memory‑corruption vulnerabilities. Connecting to a malicious AFP server can lead to remote arbitrary code execution or a denial of service (system crash). The issue is documented in multiple feeds, including the SSV lis...
Apple Mac OS X 2009-006更新修复多个安全漏洞
BUGTRAQ ID: 36956 CVE ID:...
CVE-2008-2819
BlognPlus (BURO GUN +) has an SQL injection vulnerability affecting v2.5.4 and earlier for MySQL and PostgreSQL. The issue allows remote attackers to execute arbitrary SQL commands via unspecified vectors, potentially enabling administrative access to blogs. Related connected sources (JVN DB and ...
CVE-2007-2819
CVE-2007-2819 is a cross-site scripting (XSS) vulnerability in Track+ versions up to 3.3.2, exploitable via the projId parameter in reportItem.do. The affected software is Track+, and the root cause is the injection of arbitrary web script or HTML. The connected documents confirm the vulnerabilit...
CVE-2006-2819
The provided records identify CVE-2006-2819 as a PHP remote file inclusion vulnerability in Barnraiser Igloo 0.1.9 and earlier, exploitable via a URL in the c_node[class_path] parameter of Wiki.php. The vulnerability could allow remote attackers to execute arbitrary PHP code. Affected software is...
CVE-2005-2819
CVE-2005-2819 affects DownFile 1.3. Remote attackers can gain administrator privileges through direct HTTP requests to update.php, del.php, and add_form.php. The provided materials describe the affected components and impact but do not specify the underlying root cause or a verified exploit metho...