CVE-2010-4192

Adobe Shockwave Player before 11.5.9.620 is affected by CVE-2010-4192, among others, via a crafted Director 3D Assets 0xFFFFFF88 record that triggers an incorrect memory allocation. This can lead to arbitrary code execution or memory corruption and, in some cases, a denial of service. The vulnera...

CVE-2010-4187

Adobe Shockwave Player (pre-11.5.9.620) is affected by CVE-2010-4187 via malformed Director file chunks, enabling arbitrary code execution or memory corruption. This vulnerability is part of a broader set of issues in Shockwave Player (incl. CVEs 2010-2587/8/9, 2010-4092/3/4/5/6, 2011-0555/56/7) ...

Shockwave Player < 11.5.9.620 (APSB11-01)

The remote Windows host contains a version of Adobe's Shockwave Player that is earlier than 11.5.9.620. Such versions are potentially affected by the following issues : - Several unspecified errors exist in the 'dirapi.dll' module that may allow arbitrary code execution. CVE-2010-2587,...

CVE-2009-4187

CVE-2009-4187 affects Sun Java System Portal Server Gateway component across versions 6.3.1, 7.1, and 7.2, with multiple cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary script/HTML via unspecified vectors. Public assessments in OpenVAS/NVD indicate basic...

CVE-2008-4187

Directory traversal vulnerability in index.php in ProActive CMS allows remote attackers to read arbitrary files via a .. dot dot in the template parameter...

CVE-2008-4187

CVE-2008-4187 affects ProActive CMS via a directory traversal in index.php, enabling remote attackers to read arbitrary files by supplying .. in the template parameter. Multiple connected records corroborate the vulnerability and its basic effect (read access); however, none of the provided docum...

CVE-2008-4187

creationtimestamp| type| source ---|---|--- 2008-09-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6489...

Joomla! CMS com_search Component 'searchword' Parameter RCE

The version of Joomla! running on the remote host is affected by a remote code execution vulnerability within the comsearch/views/search/tmpl/defaultresults.php script due to improper sanitization of user-supplied input to the 'searchword' parameter before passing it to the eval function. An...

Immunity Canvas: JOOMLA_EVAL

Name| joomlaeval ---|--- CVE| CVE-2007-4187 Exploit Pack| CANVAS Description| joomlaeval Notes| CVE Name: CVE-2007-4187 VENDOR: Joomla Repeatability: Infinite References: 'http://www.milw0rm.com/exploits/4212',...

CVE-2007-4187

Multiple eval injection vulnerabilities in the comsearch component in Joomla! 1.5 beta before RC1 aka Mapya allow remote attackers to execute arbitrary PHP code via PHP sequences in the searchword parameter, related to defaultresults.php in 1 components/comsearch/views/search/tmpl/ and 2...

CVE-2007-4187

CVE-2007-4187 affects Joomla! 1.5 beta before RC1 (Mapya). The vulnerability stems from multiple eval-injection flaws in the com_search component, specifically related to the searchword parameter being passed to eval() via default_results.php (1) components/com_search/views/search/tmpl/ and (2) t...

CVE-2006-4187

HP-UX vulnerability CVE-2006-4187 affects HP-UX B.11.00, B.11.11 and B.11.23 when running in Trusted Mode, allowing a local authorized user to cause a Denial of Service via unspecified vectors. Related Nessus patches (PHCO_34214/34215/34806) address DoS in Trusted Mode with libpam_unix components...