208 matches found
CVE-2008-3197
Cross-site request forgery CSRF vulnerability in phpMyAdmin before 2.11.7.1 allows remote attackers to perform unauthorized actions via a link or IMG tag to 1 the db parameter in the "Creating a Database" functionality dbcreate.php, and 2 the convcharset and collationconnection parameters related...
CVE-2008-3197
CVE-2008-3197 affects phpMyAdmin prior to 2.11.7.1, introducing a cross-site request forgery (CSRF) that enables unauthorized actions via links or image tags. The CSRF targets (1) the db parameter in the “Creating a Database” function (db_create.php) and (2) convcharset and collation_connection r...
XSRF/CSRF for creating a database and modifying user charset
PMASA-2008-5 Announcement-ID: PMASA-2008-5 Date: 2008-07-15 Updated: 2008-07-16 Summary XSRF/CSRF for creating a database and modifying user charset Description We received an advisory from Aung Khant YGN Ethical Hacker Group, and we wish to thank him for his work. A logged-in user, if abused int...
CVE-2007-3197
CVE-2007-3197 affects vBSupport 1.1 before 1.1a. The vulnerability is a SQL injection in vBSupport.php that allows remote execution of arbitrary SQL commands via unspecified vectors. Root cause: unsafeguarded SQL queries in the affected file. Impact per sources: partial confidentiality, partial i...
CVE-2006-3197
Invision Power Board (IPB) 2.1.6 and earlier contains a Cross-site scripting (XSS) vulnerability. A POST request carrying hexadecimal-encoded HTML can allow an attacker to inject arbitrary web script/HTML. The affected component is the IPB posting handler (as described in the CVE). The available ...
CVE-2005-3197
The CVE-2005-3197 entry describes a stack-based buffer overflow in PWIWrapper.dll used by Webroot Desktop Firewall prior to 1.3.0build52. The vulnerability allows a local user to execute arbitrary code with SYSTEM privileges by sending a crafted DeviceIoControl command and then removing an allowe...
