87 matches found
CVE-2008-4349
creationtimestamp| type| source ---|---|--- 2008-09-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32365...
CVE-2006-4349
PHP remote file inclusion vulnerability in ToendaCMS 1.0.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the tcmsadministersite parameter to an unspecified script, probably index.php. NOTE: this issue has been disputed by a third party, who states that...
CVE-2006-4349
ToendaCMS 1.0.3 and earlier is affected by a PHP remote file inclusion vulnerability. The issue allows a remote attacker to execute arbitrary PHP code by supplying a URL in the tcms_administer_site parameter to an unspecified script, probably index.php. Some sources dispute that tcms_administer_s...
CVE-2005-4349
SQL injection vulnerability in serverprivileges.php in phpMyAdmin 2.7.0 allows remote authenticated users to execute arbitrary SQL commands via the 1 dbname and 2 checkprivs parameters. NOTE: the vendor and a third party have disputed this issue, saying that the main task of the program is to...
CVE-2005-4349
CVE-2005-4349 : SQL injection in phpMyAdmin 2.7.0 is reported in server_privileges.php via the dbname and checkprivs parameters. The vendor/third party dispute the issue and suggest it may be rejected; a closely related CSRF issue is tracked as CVE-2005-4450. Connected sources confirm the presenc...
CVE-2005-4349
SQL injection vulnerability in serverprivileges.php in phpMyAdmin 2.7.0 allows remote authenticated users to execute arbitrary SQL commands via the 1 dbname and 2 checkprivs parameters. NOTE: the vendor and a third party have disputed this issue, saying that the main task of the program is to...
