85 matches found
CVE-2006-4349
ToendaCMS 1.0.3 and earlier is affected by a PHP remote file inclusion vulnerability. The issue allows a remote attacker to execute arbitrary PHP code by supplying a URL in the tcms_administer_site parameter to an unspecified script, probably index.php. Some sources dispute that tcms_administer_s...
CVE-2005-4349
CVE-2005-4349 : SQL injection in phpMyAdmin 2.7.0 is reported in server_privileges.php via the dbname and checkprivs parameters. The vendor/third party dispute the issue and suggest it may be rejected; a closely related CSRF issue is tracked as CVE-2005-4450. Connected sources confirm the presenc...
CVE-2005-4349
SQL injection vulnerability in serverprivileges.php in phpMyAdmin 2.7.0 allows remote authenticated users to execute arbitrary SQL commands via the 1 dbname and 2 checkprivs parameters. NOTE: the vendor and a third party have disputed this issue, saying that the main task of the program is to...
CVE-2005-4349
SQL injection vulnerability in serverprivileges.php in phpMyAdmin 2.7.0 allows remote authenticated users to execute arbitrary SQL commands via the 1 dbname and 2 checkprivs parameters. NOTE: the vendor and a third party have disputed this issue, saying that the main task of the program is to...
