127 matches found
CVE-2018-4066
An exploitable cross-site request forgery vulnerability exists in the ACEManager functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted HTTP request can cause an authenticated user to perform privileged requests unknowingly, resulting in unauthenticated requests being...
Sierra Wireless AirLink ES450 ACEManager Cross Site Request Forgery Vulnerability
An exploitable cross-site request forgery vulnerability exists in the ACEManager functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted HTTP request can cause an authenticated user to perform privileged requests unknowingly, resulting in unauthenticated requests being...
Sierra Wireless AirLink ES450 ACEManager Cross Site Request Forgery
Talos Vulnerability Report TALOS-2018-0751 Sierra Wireless AirLink ES450 ACEManager Cross-Site Request Forgery Vulnerability April 25, 2019 CVE Number CVE-2018-4066 Summary An exploitable cross-site request forgery vulnerability exists in the ACEManager functionality of Sierra Wireless AirLink...
CVE-2017-4066
CVE-2017-4066 entry is rejected and not used.
CVE-2014-4066
CVE-2014-4066 corresponds to a memory corruption vulnerability in Microsoft Internet Explorer 11 that can be triggered by visiting a crafted web site, potentially allowing remote code execution or memory corruption leading to a denial of service. The description in multiple sources identifies IE1...
CVE-2016-4066
Fortinet FortiWeb is affected by a CSRF vulnerability (CVE-2016-4066) that allows an attacker to change administrator passwords by triggering crafted requests. The vulnerability is documented in Fortinet advisories and common CVE records, indicating impact on FortiWeb versions prior to 5.5.3. The...
Oracle: Security Advisory (ELSA-2007-0845)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2015-4066
Multiple SQL injection vulnerabilities in admin/handlers.php in the GigPress plugin before 2.3.9 for WordPress allow remote authenticated users to execute arbitrary SQL commands via the 1 showartistid or 2 showvenueid parameter in an add action in the gigpress.php page to wp-admin/admin.php...
CVE-2015-4066
CVE-2015-4066 affects the WordPress GigPress plugin (prior to version 2.3.9). The vulnerability is an SQL injection in admin/handlers.php triggered by the show_artist_id/show_venue_id parameters in an add action within gigpress.php, allowing remote authenticated users to execute arbitrary SQL com...
WordPress Plugin GigPress 2.3.8 - SQL Injection
WordPress Plugin GigPress 2.3.8 - SQL Injection Title: SQLi vulnerabilities in WordPress plugin "GigPress" Author: Adrián M. F. - adrimf85atgmaildotcom Date: 2015-05-25 Vendor Homepage: https://wordpress.org/plugins/gigpress/ Active installs: 20,000+ Vulnerable version: 2.3.8 Fixed version: 2.3.9...
WordPress GigPress 2.3.8 SQL Injection Vulnerability
WordPress GigPress plugin version 2.3.8 suffers from a remote SQL injection vulnerability. Title: SQLi vulnerabilities in WordPress plugin "GigPress" Author: Adrián M. F. - adrimf85atgmaildotcom Date: 2015-05-25 Vendor Homepage: https://wordpress.org/plugins/gigpress/ Active installs: 20,000+...
CVE-2015-4066
creationtimestamp| type| source ---|---|--- 2015-05-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37109...
WordPress Plugin GigPress 2.3.8 - SQL Injection
Title: SQLi vulnerabilities in WordPress plugin "GigPress" Author: Adrián M. F. - adrimf85atgmaildotcom Date: 2015-05-25 Vendor Homepage: https://wordpress.org/plugins/gigpress/ Active installs: 20,000+ Vulnerable version: 2.3.8 Fixed version: 2.3.9 CVE: CVE-2015-4066 Vulnerabilities 2...
WordPress GigPress 2.3.8 SQL Injection
Title: SQLi vulnerabilities in WordPress plugin "GigPress" Author: Adrián M. F. - adrimf85atgmaildotcom Date: 2015-05-25 Vendor Homepage: https://wordpress.org/plugins/gigpress/ Active installs: 20,000+ Vulnerable version: 2.3.8 Fixed version: 2.3.9 CVE: CVE-2015-4066 Vulnerabilities 2...
Fedora 19 : cscope-15.8-5.fc19 (2014-11972)
Fixed emacs-nox integration bz 961709 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...
Microsoft Internet Explorer Multiple Vulnerabilities (2976627)
This host is missing a critical security update according to Microsoft Bulletin MS14-051. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Gnuboard <= 4.33.02 tp.php PATH_INFO SQL Injection
No description provided by source. Exploit Title: Gnuboard = 4.33.02 PATHINFO SQL INJECTION Vulnerability Google Dork: inurl:gnuboard4/bbs/board.php Date: 2011-2-14 Author: flyh4t Software Link: http://sir.co.kr/main/gnuboard4/ Version: Gnuboard = 4.33.02 Tested on: linux+apache CVE : CVE-2011-40...
CVE-2013-4066
CVE-2013-4066 affects IBM InfoSphere Information Server 8.0, 8.1, 8.5 (FP3), 8.7 and 9.1. An attacker can perform a clickjacking attack by overlaying the Web Console and tricking the user into clicking. IBM’s bulletin lists fixes per version: 8.0/8.1 fixes, 8.5 FP3, 8.7 FP2, and 9.1 upgrade to 9....
Fedora 18 : eucalyptus-3.2.1-2.fc18 (2013-3498)
This update addresses CVE-2012-4066, three Fedora-specific issues related to the eucalyptus user console, and various other bugfixes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...