94 matches found
CVE-2012-4236
The vulnerability CVE-2012-4236 affects Total Shop UK eCommerce Open Source (CodeIgniter-based) before version 2.1.2_p1. Root cause: the refresh_page function in /application/modules/_main/views/_top.php writes the entire URL (including PATH_INFO) to Javascript without sufficient sanitisation, en...
CVE-2012-4236
creationtimestamp| type| source ---|---|--- 2012-08-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37632...
SuSE 11.1 Security Update : logwatch (SAT Patch Number 4236)
Shell meta characters in log file names could lead to execution of arbitrary code. CVE-2011-1018 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc...
CVE-2010-4236
CVE-2010-4236 describes an untrusted search path vulnerability in IBM OmniFind Enterprise Edition before 9.1 via estaskwrapper, where ES_LIBRARY_PATH and PATH are used during execution of estasklight to escalate privileges locally. The affected component is estaskwrapper/estasklight and the root ...
Mac OS X 10.5.6 Update / Mac OS X Security Update 2008-008
The remote host is missing Mac OS X 10.5.6 Update / Mac OS X Security Update 2008-008. One or more of the following components are affected: ATS BOM CoreGraphics CoreServices CoreTypes Flash Player Plug-in Kernel Libsystem Managed Client networkcmds Podcast Producer UDF OpenVAS Vulnerability Test...
CVE-2009-4236
EC-CUBE information disclosure vulnerability (CVE-2009-4236) affects EC-CUBE Ver2 Version 2.4.0 RC1 through 2.4.1 and EC-CUBE Community Edition r18068 through r18428. The issue enables remote attackers to obtain sensitive customer data via unknown vectors related to sessions. Root cause is descri...
CVE-2008-4236
CVE-2008-4236 affects Apple Type Services (ATS) in Mac OS X 10.5 before 10.5.6. A crafted embedded font in a PDF file can cause a denial of service (infinite loop) when processed by ATS. The issue is addressed in Mac OS X 10.5.6 Security Update (and related updates) by adding validation for embed...
About the security content of Security Update 2008-008 / Mac OS X v10.5.6
About the security content of Security Update 2008-008 / Mac OS X v10.5.6 Last Modified: December 15, 2008 Article: HT3338 Summary This document describes the security content of Security Update 2008-008 / Mac OS X v10.5.6, which can be downloaded and installed via Software Update preferences, or...
AIX 5.2 TL 10 : bos.rte.printers (U809751)
The remote host is missing AIX PTF U809751, which is related to the security of the package bos.rte.printers. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from AIX Security PTF U809751. The text itself is copyright C...
CVE-2007-4236
CVE-2007-4236 describes a buffer overflow in the LPD component of the bos.rte.printers package on IBM AIX 5.2 and 5.3 that can allow local users with printq group privileges to obtain root privileges. The vulnerability affects the lpd/bos.rte.printers stack/heap handling as described in the CVE e...
CVE-2006-4236
The CVE-2006-4236 entry describes multiple PHP remote file inclusion vulnerabilities in POWERGAP. An attacker can craft a URL using the shopid parameter (to s01.php, s02.php, s03.php, or s04.php) or manipulate PATH_INFO after shopid= or sid= to cause arbitrary PHP code execution on affected POWER...
CVE-2005-4236
CVE-2005-4236 concerns an XSS vulnerability in the CKGOLD package, specifically in the search.php component. The issue allows remote attackers to inject arbitrary web script or HTML through the search parameters, enabling cross-site scripting. The available connected records confirm the flaw as a...
