191 matches found
Mandriva Linux Security Advisory : libmbfl (MDVSA-2010:225-1)
A vulnerability was discovered and corrected in libmbfl php : - Fix bug 53273 mbstrcut returns garbage with the excessive length parameter CVE-2010-4156. The updated packages have been patched to correct these issues. Update : The MDVSA-2010:225 advisory used the wrong patch to address the proble...
CVE-2010-4156
creationtimestamp| type| source ---|---|--- 2010-11-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34979...
CVE-2009-4156
CVE-2009-4156 affects Ciamos CMS (version 0.9.5 and earlier). A PHP remote file inclusion vulnerability exists in modules/pms/index.php that allows an attacker to supply a URL in the module_path parameter to execute arbitrary PHP code on the server. Documents consistently describe the vulnerabili...
CVE-2009-4156
creationtimestamp| type| source ---|---|--- 2009-12-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10259...
CVE-2008-4156
CVE-2008-4156 affects the CustomCms (CCMS) Gaming Portal 4.0. The vulnerability is a SQL injection in print.php via the id parameter when magic_quotes_gpc is disabled. This creates a risk of arbitrary SQL execution by a remote attacker. The available documents do not provide specific affected ver...
CVE-2007-4156
CVE-2007-4156 affects wolioCMS and describes multiple SQL injection vulnerabilities. The issues enable remote attackers to execute arbitrary SQL commands via: (1) the id parameter to member.php in a page action (related to a SELECT in common.php); (2) the loginid parameter (uid variable); and (3)...
CVE-2006-4156
PHP remote file inclusion vulnerability in big.php in pearlabs mafia moblog 6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pathtotemplate parameter. NOTE: a third party claims that the researcher is incorrect, because template.php defines pathtotemplate befor...
CVE-2006-4156
CVE-2006-4156 affects Pearlabs Mafia Moblog versions 6 and earlier. The vulnerability is a PHP remote code execution via the pathtotemplate parameter used in big.php (and possibly related template handling). A third-party dispute notes that pathtotemplate may be defined before its use, and CVE da...
CVE-2005-4156
CVE-2005-4156 affects Mambo 4.5 (1.0.0) through 4.5 (1.0.9) with magic_quotes_gpc disabled. A remote attacker can read arbitrary files and potentially cause a denial of service via a query string that ends with a NULL character. Root cause: input handling vulnerability allowing unintended file ac...
