Lucene search
+L

87 matches found

OSV
OSV
added 2008/09/25 7:25 p.m.5 views

CVE-2008-4247

ftpd in OpenBSD 4.3, FreeBSD 7.0, NetBSD 4.0, Solaris, and possibly other operating systems interprets long commands from an FTP client as multiple commands, which allows remote attackers to conduct cross-site request forgery CSRF attacks and execute arbitrary FTP commands via a long ftp:// URI...

7.8AI score
SaveExploits0References15
CVE
CVE
added 2008/09/25 7:0 p.m.97 views

CVE-2008-4247

CVE-2008-4247 affects FTP servers that interpret long commands as multiple requests, enabling cross-site request forgery (CSRF) and arbitrary FTP commands via a crafted long ftp:// URI. The primary publicly documented impact comes from FreeBSD lukemftpd, which splits long commands and could allow...

7.5CVSS7.3AI score0.04045EPSS
SaveExploits2References15Affected Software3
Cvelist
Cvelist
added 2008/09/25 7:0 p.m.26 views

CVE-2008-4247

ftpd in OpenBSD 4.3, FreeBSD 7.0, NetBSD 4.0, Solaris, and possibly other operating systems interprets long commands from an FTP client as multiple commands, which allows remote attackers to conduct cross-site request forgery CSRF attacks and execute arbitrary FTP commands via a long ftp:// URI...

7.3AI score0.04045EPSS
SaveExploits2References15
Circl
Circl
added 2008/09/20 12:0 a.m.8 views

CVE-2008-4247

creationtimestamp| type| source ---|---|--- 2008-09-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32399...

7.5CVSS5.7AI score0.04045EPSS
SaveExploits2References1
CVE
CVE
added 2007/08/08 11:0 p.m.50 views

CVE-2007-4247

CVE-2007-4247 concerns Windows Calendar on Microsoft Windows Vista. The vulnerability arises when processing a malformed ICS file, leading to a NULL dereference and a persistent application crash, i.e., a denial of service. Affected component is the Windows Calendar feature in Vista; exploitation...

4.3CVSS6.6AI score0.14663EPSS
SaveExploits0References6Affected Software1
UbuntuCve
UbuntuCve
added 2006/09/29 7:7 p.m.32 views

CVE-2006-4247

Unspecified vulnerability in the Password Reset Tool before 0.4.1 on Plone 2.5 and 2.5.1 Release Candidate allows attackers to reset the passwords of other users, related to "an erroneous security declaration."...

6.4CVSS5.9AI score0.01004EPSS
SaveExploits0References1
CVE
CVE
added 2006/09/29 7:0 p.m.61 views

CVE-2006-4247

CVE-2006-4247 affects Plone 2.5 and 2.5.1 Release Candidate with the Password Reset Tool prior to 0.4.1, enabling attackers to reset other users’ passwords due to an erroneous security declaration. Affected component: Password Reset Tool; vulnerability type: unspecified in detail, but impact is u...

6.4CVSS6.6AI score0.01004EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder