89 matches found
CVE-2009-4149
CVE-2009-4149 is an XSS vulnerability in the web interface of CA Service Desk 12.1. The issue allows a remote attacker to inject arbitrary script/HTML via an unspecified parameter. Public references include the CA Security Notice (CA20091208-01) with patches for CA Service Desk 12.1 across Window...
CVE-2008-4149
Cross-site scripting XSS vulnerability in the Greg Holsclaw Link to Us module 5.x before 5.x-1.1 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via the "Link page header" field...
CVE-2008-4149
Cross-site scripting XSS vulnerability in the Greg Holsclaw Link to Us module 5.x before 5.x-1.1 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via the "Link page header" field...
CVE-2008-4149
CVE-2008-4149 is a documented XSS vulnerability in the Drupal module “Link to Us” (Greg Holsclaw) for 5.x versions prior to 5.x-1.1. The issue resides in the Link page header input, allowing injection of arbitrary web script or HTML. Impact described as cross-site scripting; exploitation details ...
CVE-2007-4149
CVE-2007-4149 affects Visionsoft Audit on Demand Service (VSAOD) in Visionsoft Audit 12.4.0.0. The issue occurs because unauthenticated remote commands (LOG., SETTINGSFILE, UNINSTALL) allow arbitrary file creation/overwrite, reconfiguration of VSAOD, or denial of service (daemon shutdown). The fi...
Bandersnatch <= 0.4 Multiple Vulnerabilities
Binary data 4149.prm...
CVE-2005-4149
CVE-2005-4149 affects Lyris ListManager 8.8–8.9b, where remote attackers can trigger errors in TML scripts to leak sensitive data in diagnostic messages (installation path, SQL queries, product code). Impact is information disclosure via error messages exposed by normal requests to nonexistent pa...
