CVE-2007-3883

The Data Dynamics ActiveBar ActiveX control actbar3.ocx 3.2 and earlier allows remote attackers to create or overwrite files via a full pathname in 1 the second argument to the Save method, or the first argument to the 2 SaveLayoutChanges or 3 SaveMenuUsageData method...

CVE-2007-3883

CVE-2007-3883 affects the Data Dynamics ActiveBar ActiveX control (actbar3.ocx) version 3.2 and earlier. The vulnerability allows remote attackers to create or overwrite files by providing a full pathname as an argument to the Save method, or to the first argument of SaveLayoutChanges or SaveMenu...

CVE-2006-3883

CVE-2006-3883 affects Gonafish LinksCaffe 3.0 with multiple XSS vulnerabilities exposed through specific parameters: tablewidth in counter.php; newdays in links.php; and tableborder, menucolor, textcolor, bodycolor in menu.inc.php. The connected documents confirm the vulnerability pattern but do ...

php security update

CentOS Errata and Security Advisory CESA-2006:0276 Updated PHP packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting...

Moderate: Red Hat Security Advisory: php security update

Updated PHP packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web...

SUSE-SA:2005:069: php4,php5

The remote host is missing the patch for the advisory SUSE-SA:2005:069 php4,php5. Updated PHP packages fix the following security issues: - Stefan Esser found out that a bug in parsestr could lead to activation of registerglobals CVE-2005-3389 and additionally that file uploads could overwrite...

CVE-2005-3883

PHP before 5.1.0 contains a CRLF header-injection flaw in mb_send_mail that can be exploited remotely via the To address to inject arbitrary email headers. Multiple OpenVAS/Nessus results corroborate CVE-2005-3883 as part of broader PHP