70 matches found
CVE-2010-4366
Multiple cross-site scripting XSS vulnerabilities in forumnewtopic.php in Chameleon Social Networking allow remote attackers to inject arbitrary web script or HTML via the 1 threadtitle and 2 threaddescription parameters in a message...
CVE-2010-4366
CVE-2010-4366: Concrete details across connected records show XSS in Chameleon Social Networking. The vulnerability is in forum_new_topic.php, exploitable via user-supplied thread_title and thread_description parameters in a message. Affected component: the forum topic creation feature of Chamele...
CVE-2010-4366
creationtimestamp| type| source ---|---|--- 2010-11-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15543...
CVE-2009-4366
ScriptsEz Ez Blog 1.0 contains a cross-site scripting (XSS) vulnerability in index.php where the yr parameter in a bmonth action can be used to inject arbitrary web script/HTML. CVE-2009-4366 has CVSSv2 base score 4.3 (Medium); attack vector: Network; authentication: None; confidentiality impact:...
CVE-2009-4366
creationtimestamp| type| source ---|---|--- 2009-12-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10458 2009-12-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10461...
CVE-2008-4366
CVE-2008-4366 is an unrestricted file upload in the image upload component of Camera Life 2.6.2b4. According to the connected documents, remote authenticated users can upload a file with an executable extension and then access it via a direct URL under images/photos/upload, potentially executing ...
CVE-2008-4366
creationtimestamp| type| source ---|---|--- 2008-09-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6594...
CVE-2006-4366
CVE-2006-4366 affects RedBLoG 0.5. It describes a PHP remote file inclusion in index.php, exploitable via a URL in the root_path parameter, enabling remote code execution. The vulnerability is caused by using an unvalidated root_path value to include PHP files, allowing an attacker to execute arb...
