132 matches found
CVE-2008-4154
CVE-2008-4154 describes an SQL injection in living-e webEdition CMS exploitable via the we_objectID parameter. The vulnerability allows remote attackers to manipulate SQL commands, with the affected component being the webEdition CMS and the root cause being improper handling of the we_objectID i...
CVE-2008-4154
SQL injection vulnerability in living-e webEdition CMS allows remote attackers to execute arbitrary SQL commands via the weobjectID parameter...
CVE-2008-4154
creationtimestamp| type| source ---|---|--- 2008-08-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6281...
Debian Security Advisory DSA 1564-1 (wordpress)
The remote host is missing an update to wordpress announced via advisory DSA 1564-1. OpenVAS Vulnerability Test $Id: deb15641.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1564-1 wordpress Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
Debian: Security Advisory (DSA-1564-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 1564-1] New wordpress packages fix several vulnerabilities
------------------------------------------------------------------------ Debian Security Advisory DSA-1564-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst May 01, 2008 http://www.debian.org/security/faq -...
GLSA-200610-12 : Apache mod_tcl: Format string vulnerability
The remote host is affected by the vulnerability described in GLSA-200610-12 Apache modtcl: Format string vulnerability Sparfell discovered format string errors in calls to the setvar function in tclcmds.c and tclcore.c. Impact : A remote attacker could exploit the vulnerability to execute...
CVE-2006-4154
Format string vulnerability in the modtcl module 1.0 for Apache 2.x allows context-dependent attackers to execute arbitrary code via format string specifiers that are not properly handled in a setvar function call in 1 tclcmds.c and 2 tclcore.c...
CVE-2006-4154
CVE-2006-4154 describes a format-string vulnerability in the Apache mod_tcl module (version 1.0 for Apache 2.x). The root cause is format string handling in calls to set_var (in tcl_cmds.c and tcl_core.c), allowing a remote attacker to execute arbitrary code with the httpd process privileges. Aff...
[VulnWatch] iDefense Security Advisory 10.13.06: Apache HTTP Server mod_tcl set_var Format String Vulnerability
Apache HTTP Server modtcl setvar Format String Vulnerability iDefense Security Advisory 10.13.06 http://www.idefense.com/intelligence/vulnerabilities/ Oct 13, 2006 I. BACKGROUND The modtcl module for the Apache httpd v2.x is a scripting module that allows a TCL developer to create server side...
CVE-2005-4154
CVE-2005-4154 affects PEAR installer 1.4.2 and earlier. The vulnerability is described as unspecified and allows user-assisted attackers to execute arbitrary code via a crafted package that can run code when the pear command is executed or when the Web/Gtk frontend is loaded. Connected sources co...