167 matches found
CVE-2008-3846
Cross-site scripting XSS vulnerability in mysql-lists 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2008-3846
The vulnerability CVE-2008-3846 affects mysql-lists from AquaGardenSoft Co.,Ltd. (ver. 1.2 and earlier). It is described as a Cross-site Scripting (XSS) issue that could allow an arbitrary script to execute in a user’s browser. The exact attack vectors are not specified in the provided documents,...
CVE-2007-3846
CVE-2007-3846 describes a directory traversal flaw in Subversion prior to 1.4.5 (used by TortoiseSVN prior to 1.4.5 and possibly other products) on Windows. The vulnerability allows remote authenticated users to overwrite and create arbitrary files stored in the repository by crafting a filename ...
CVE-2006-3846
PHP remote file inclusion vulnerability in extadminmenus.class.php in the MultiBanners 1.0.1 for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...
CVE-2006-3846
CVE-2006-3846 is a remote file inclusion vulnerability in the MultiBanners 1.0.1 for Mambo, via extadminmenus.class.php, allowing an attacker to execute arbitrary PHP code by supplying a URL to mosConfig_absolute_path. The affected component is the mosConfig_absolute_path parameter; impact descri...
Sql injection
SQL injection vulnerability in news.php in Tony Baird Fantastic News 2.1.1 allows remote attackers to execute arbitrary SQL commands via the page parameter. NOTE: the category vector is already covered by CVE-2005-3846...
