89 matches found
CVE-2009-4234
CVE-2009-4234 describes an XSS vulnerability in the Micronet Network Access Controller SP1910, specifically in loginpages/error_user.shtml where the msg parameter can be exploited to inject arbitrary script/HTML. Exploitation details or exploit status are not provided in the documents; the vulner...
CVE-2009-4234
creationtimestamp| type| source ---|---|--- 2009-11-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10247...
CVE-2008-4234
CVE-2008-4234 affects Mac OS X 10.5.x (CoreTypes). An incomplete blacklist in the Quarantine/Download Validation allowed a file with executable content type and no application association to bypass warnings, potentially enabling arbitrary code execution. Affected: Mac OS X 10.5 to 10.5.5; Server ...
About the security content of Security Update 2008-008 / Mac OS X v10.5.6
About the security content of Security Update 2008-008 / Mac OS X v10.5.6 Last Modified: December 15, 2008 Article: HT3338 Summary This document describes the security content of Security Update 2008-008 / Mac OS X v10.5.6, which can be downloaded and installed via Software Update preferences, or...
CVE-2007-4234
CVE-2007-4234 refers to an issue in Camera Life prior to 2.6 where an unspecified vulnerability allows remote attackers to download private photos via unspecified vectors related to photo names. The provided sources (NVD/NVD-like entries) cite third‑party information for some details and do not s...
CVE-2006-4234
CVE-2006-4234 affects dotProject up to version 2.0.4: PHP remote file inclusion via the baseDir parameter in classes/query.class.php may allow an attacker to execute arbitrary PHP code. The description and connected sources confirm the vulnerability exists exploitable through crafted URLs; howeve...
dotProject Multiple Scripts Remote File Inclusion
The remote host is running dotProject, a web-based, open source, project management application written in PHP. The installed version of dotProject fails to sanitize input to various parameters and scripts before using it to include PHP code. Provided PHP's 'registerglobals' setting is enabled, a...
CVE-2005-4234
The CVE-2005-4234 entry describes a SQL injection vulnerability in EncapsGallery 1.0.0 and earlier , specifically in gallery.php via the id parameter. The underlying issue is improper handling of user-supplied input leading to arbitrary SQL execution by remote attackers. Documented sources confir...
