CVE-2010-4071

Cross-site scripting XSS vulnerability in AgentTicketZoom in OTRS 2.4.x before 2.4.9, when RichText is enabled, allows remote attackers to inject arbitrary web script or HTML via JavaScript in an HTML e-mail...

CVE-2010-4071

Cross-site scripting XSS vulnerability in AgentTicketZoom in OTRS 2.4.x before 2.4.9, when RichText is enabled, allows remote attackers to inject arbitrary web script or HTML via JavaScript in an HTML e-mail...

CVE-2010-4071

CVE-2010-4071 involves an XSS vulnerability in Open Ticket Request System (OTRS): in OTRS 2.4.x prior to 2.4.9, when RichText is enabled, attackers can inject arbitrary script/HTML via JavaScript in HTML emails sent to AgentTicketZoom. The issue is tied to the RichText email handling and can lead...

OTRS 'AgentTicketZoom' HTML Injection Vulnerability

OTRS is prone to an HTML-injection vulnerability. This VT has been deprecated and replaced by the VT with the OID: 1.3.6.1.4.1.25623.1.0.902352. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective rig...

CVE-2009-4071

CVE-2009-4071 affects the Opera web browser (notably Opera on Linux/Unix paths in the connected records) where, when exception stacktraces are enabled, scripting error messages from a site can be read by a different site, enabling information disclosure and cross-site scripting via unspecified ve...

CVE-2008-4071

The CVE-2008-4071 entry concerns a vulnerability in a specific ActiveX control in Adobe Acrobat 9 when used on Windows Vista with Internet Explorer 7. The issue allows remote attackers to trigger a denial of service (browser crash) by supplying an invalid acroie:// URL in the src property of the ...

CVE-2008-4071

creationtimestamp| type| source ---|---|--- 2008-09-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6424...

CVE-2007-4071

CVE-2007-4071 (Webbler CMS) — Multiple XSS vulnerabilities in the uploader/index.php component allow remote attackers to inject arbitrary script/HTML via the (1) page or (2) login parameter. Affected: Webbler CMS versions before 3.1.6. Impact: potential for arbitrary script execution in the victi...

CVE-2006-4071

Sign extension vulnerability in the createBrushIndirect function in the GDI library gdi32.dll in Microsoft Windows XP, Server 2003, and possibly other versions, allows user-assisted attackers to cause a denial of service application crash via a crafted WMF file...

CVE-2006-4071

Sign extension vulnerability in the createBrushIndirect function in the GDI library gdi32.dll in Microsoft Windows XP, Server 2003, and possibly other versions, allows user-assisted attackers to cause a denial of service application crash via a crafted WMF file...

CVE-2006-4071

CVE-2006-4071 affects Microsoft Windows XP and Windows Server 2003 (gdi32.dll). Vulnerable component: createBrushIndirect in GDI; root cause: sign extension issue that allows a crafted WMF file to crash the application (user-assisted DoS). Impact: denial of service via crash. Exploitation details...

CVE-2022-4071

RSJoomla RSFirewall Plugin is affected (RSJoomla RSFirewall Plugin; specifics not fully disclosed in the provided doc). The vulnerability is reported in the HTTP Header Handler function, where manipulation of the X-Forwarded-For header leads to improper output neutralization for logs. This could ...

MS:51A2F535-449B-4071-B1D7-ED2A46260487

...