64 matches found
CVE-2009-4119
The CVE-2009-4119 issue affects Drupal’s Feed Element Mapper module: versions 5.x before 5.x-1.3, 6.x before 6.x-1.3, and 6.x-2.0-alpha before 6.x-2.0-alpha4 are vulnerable to cross-site scripting, allowing remote attackers to inject arbitrary scripts/HTML via unspecified vectors. Root cause deta...
CVE-2008-4119
CA Service Desk CVE-2008-4119 describes multiple cross-site scripting vulnerabilities affecting CA Service Desk r11.2 and CA CMDB 11.0–11.2. The root cause, per sources, is insecure handling of passed variables in multiple web forms, enabling remote attackers to inject arbitrary script via unspec...
CVE-2007-4119
CVE-2007-4119 affects Berthanas Ziyaretci Defteri 2.0, with the vulnerability located in yonetici.asp. The issue allows remote attackers to execute arbitrary SQL commands via the (1) user and (2) Pass fields, per the description. CVSS details from the entry indicate a network vector, low access c...
CVE-2006-4119
CVE-2006-4119 affects GeheimChaos 0.5 and earlier, describing an SQL injection in gc.php via the Temp_entered_password parameter that could allow remote execution of arbitrary SQL commands. The available sources confirm the vulnerable component and input parameter, with the underlying issue being...