CVE-2010-4335

The validatePost function in libs/controller/components/security.php in CakePHP 1.3.x through 1.3.5 and 1.2.8 allows remote attackers to modify the internal Cake cache and execute arbitrary code via a crafted dataTokenfields value that is processed by the unserialize function, as demonstrated by...

CVE-2010-4335

CakePHP 1.2.8 and 1.3.x up to 1.3.5 are affected. The _validatePost function in libs/controller/components/security.php processes a crafted data[_Token][fields] value with unserialize, allowing remote attackers to modify the internal Cake cache and execute arbitrary code (demonstrated via modifyi...

CVE-2010-4335

creationtimestamp| type| source ---|---|--- 2011-01-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16902 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/cakephpcachecorruption.rb 2025-02-06 03:13:40+00:00|...

CVE-2009-4335

Multiple unspecified vulnerabilities in bundled stored procedures in the Spatial Extender component in IBM DB2 9.5 before FP5 have unknown impact and remote attack vectors, related to "remote exploits."...

CVE-2009-4335

CVE-2009-4335 concerns multiple unspecified vulnerabilities in the bundled stored procedures of the Spatial Extender component in IBM DB2 9.5 prior to Fix Pack 5. The available sources indicate potential remote exposure with unknown impact, but explicit exploit details are not provided in the doc...

SLES9: Security update for gzip

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: gzip For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5012976 within the SuSE...

SuSE9 Security Update : gzip (YOU Patch Number 11220)

Several security issues with gzip have been found that can be exploited to compromise the system in conjunction with other programs while processing malformed archive files. The vulnerabilities have been tracked by Mitre CVE-2006-4334, CVE-2006-4335, CVE-2006-4336, CVE-2006-4337 and CVE-2006-4338...

HP-UX Update for Software Distributor (SD) HPSBUX02195

Check for the Version of Software Distributor SD OpenVAS Vulnerability Test HP-UX Update for Software Distributor SD HPSBUX02195 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

CVE-2008-4335

SQL injection vulnerability in album.php in Atomic Photo Album APA 1.1.0pre4 allows remote attackers to execute arbitrary SQL commands via the apaalbumID parameter...

CVE-2008-4335

SQL injection vulnerability in album.php in Atomic Photo Album APA 1.1.0pre4 allows remote attackers to execute arbitrary SQL commands via the apaalbumID parameter...

CVE-2008-4335

The CVE-2008-4335 entry relates to Atomic Photo Album (APA) 1.1.0pre4. The vulnerability is a SQL injection in album.php, exploitable via the apa_album_ID parameter, which allows a remote attacker to execute arbitrary SQL commands. The issue arises from improper input handling in the affected scr...

CVE-2008-4335

creationtimestamp| type| source ---|---|--- 2008-09-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6572 2008-09-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6574...

Gentoo Security Advisory GLSA 200609-13 (gzip)

The remote host is missing updates announced in advisory GLSA 200609-13. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200611-24 (lha)

The remote host is missing updates announced in advisory GLSA 200611-24. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200609-13 (gzip)

The remote host is missing updates announced in advisory GLSA 200609-13. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200611-24 (lha)

The remote host is missing updates announced in advisory GLSA 200611-24. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD Ports: gzip

The remote host is missing an update to the system as announced in the referenced advisory. VID 11a84092-8f9f-11db-ab33-000e0c2e438a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: gzip

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

SSH Tectia Server < 5.2.4 / 5.3.6 Local Privilege Escalation

Binary data 4335.prm...

SuSE 10 Security Update : gzip (ZYPP Patch Number 2085)

This update fixes several security problems that can be exploited to compromise the system in conjunction with other programs while processing malformated archive files. CVE-2006-4334 / CVE-2006-4335 / CVE-2006-4336 / CVE-2006-4337 / CVE-2006-4338 %NASLMINLEVEL 70300 C Tenable Network Security,...