CVE-2012-4281

creationtimestamp| type| source ---|---|--- 2012-05-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18871...

CVE-2010-4281

CVE-2010-4281 describes an incomplete blacklist vulnerability in Pandora FMS prior to 3.1.1. The issue lies in the safe_url_extraclean function used by ajax.php (parameter page); it filters the colon character but fails to prevent UNC paths, allowing an attacker to reference remote resources (e.g...

Pandora Fms 3.1 - Directory Traversal Local File Inclusion

Pandora Fms 3.1 - Directory Traversal Local File Inclusion + Introduction Pandora FMS for Pandora Flexible Monitoring System is a software solution for monitoring computer networks. It allows monitoring in a visual way the status and performance of several parameters from different operating...

VMSA-2008-0018 : VMware Hosted products and patches for ESX and ESXi resolve two security issues

a. A privilege escalation on 32-bit and 64-bit guest operating systems VMware products emulate hardware functions and create the possibility to run guest operating systems. A flaw in the CPU hardware emulation might allow the virtual CPU to incorrectly handle the Trap flag. Exploitation of this...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in KnowledgeTree before 3.5.4a allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2007-4281...

VMSA-2008-0018 VMware Hosted products and patches for ESX and ESXi resolve two security issues

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ VMware Security Advisory Advisory ID: VMSA-2008-0018 Synopsis: VMware Hosted products and patches for ESX and ESXi resolve two security issues Issue date: 2008-11-06 Updated on...

CVE-2007-4281

The CVE-2007-4281 entry describes a cross-site scripting (XSS) vulnerability in KnowledgeTree Open Source versions 3.4 and 3.4.1. The issue allows remote attackers to inject arbitrary web script or HTML via the login field on the login page, and via other unspecified vectors. The provided connect...

CVE-2006-4281

PHP remote file inclusion vulnerability in akocomments.php in AkoComment 1.1 module comakocomment for Mambo 4.5 allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-4281

PHP remote file inclusion vulnerability in akocomments.php in AkoComment 1.1 module comakocomment for Mambo 4.5 allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-4281

CVE-2006-4281 describes a PHP remote file inclusion vulnerability in the AkoComment 1.1 module (com_akocomment) for Mambo 4.5. The flaw allows an attacker to cause remote PHP code execution via a URL supplied to the mosConfig_absolute_path parameter in akocomments.php. This is a vulnerability in ...

CVE-2005-4281

CVE-2005-4281 : XSS in Zaygo HostingCart 2.0 and earlier allows remote script/HTML injection via certain search module parameters, possibly the root parameter to zaygo.cgi. Affected: HostingCart versions 2.0 and earlier. Root cause: untrusted input in search-related parameters leading to script e...