90 matches found
CVE-2011-4173
The data confirms CVE-2011-4173 is a CSRF vulnerability in Simple Machines Forum (SMF) 2.x prior to 2.0.1, enabling remote attackers to hijack administrator/moderator sessions via image-file related vectors. Affected product/component: SMF 2.x (before 2.0.1); root cause is a cross-site request fo...
CVE-2010-4173
CVE-2010-4173 affects libsdp; the default libsdp.conf configuration for/libsdp 1.1.104 and earlier creates log files in /tmp, enabling local users to overwrite arbitrary files via a symlink or hard link attack on the libsdp.log.##### temporary file. The connected sources consistently describe ins...
CuteNews/UTF-8 CuteNews Multiple Vulneablities
The host is running CuteNews/UTF-8 CuteNews and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbcutenewsnutf8cutenewsmultvuln.nasl 4865 2016-12-28 16:16:43Z teissa $ CuteNews/UTF-8 CuteNews Multiple Vulneablities Authors: Antu Sanadi Udated By: Antu Sanadi on 2009-12-10 61...
CVE-2009-4173
Cross-site request forgery CSRF vulnerability in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allows remote attackers to hijack the authentication of administrators for requests that create new users, including a new administrator, via an adduser action in the editusers module in index.php...
CVE-2009-4173
creationtimestamp| type| source ---|---|--- 2009-11-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33344 2009-11-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10002...
CVE-2008-4173
SQL injection vulnerability in ProArcadeScript 1.3 allows remote attackers to execute arbitrary SQL commands via the random parameter to the default URI...
CVE-2008-4173
creationtimestamp| type| source ---|---|--- 2008-09-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6486...
openSUSE 10 Security Update : star (star-4173)
This update fixes a directory traversal bug in star. CVE-2007-4131 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update star-4173. The text description of this plugin is C SUSE LLC...
CVE-2007-4173
CVE-2007-4173 describes an SQL injection in duyuruoku.asp of Hunkaray Okul Portali 1.1 . The vulnerability is exploitable via the id parameter, enabling remote attackers to execute arbitrary SQL commands. The provided documents do not specify affected versions beyond 1.1 or provide a concrete rem...
