94 matches found
CVE-2010-4369
Directory traversal vulnerability in AWStats before 7.0 allows remote attackers to have an unspecified impact via a crafted LoadPlugin directory...
CVE-2010-4369
CVE-2010-4369 covers a directory traversal vulnerability in AWStats prior to 7.0, exploitable by remote attackers through a crafted LoadPlugin directory. Public references in OpenVAS and Ubuntu advisories confirm the flaw and patch activity (USN-1047-1; MDVSA-2011:033). The NVD notes an impact as...
CVE-2010-4369
Directory traversal vulnerability in AWStats before 7.0 allows remote attackers to have an unspecified impact via a crafted LoadPlugin directory...
CVE-2009-4369
Cross-site scripting XSS vulnerability in the Contact module modules/contact/contact.admin.inc or modules/contact/contact.module in Drupal Core 5.x before 5.21 and 6.x before 6.15 allows remote authenticated users with "administer site-wide contact form" permissions to inject arbitrary web script...
CVE-2009-4369
CVE-2009-4369 describes a Cross-site scripting (XSS) vulnerability in Drupal Core’s Contact module (modules/contact/contact.admin.inc or modules/contact/contact.module). Affects Drupal Core 5.x before 5.21 and 6.x before 6.15. The issue allows remote authenticated users with the permission to “ad...
CVE-2009-4369
Cross-site scripting XSS vulnerability in the Contact module modules/contact/contact.admin.inc or modules/contact/contact.module in Drupal Core 5.x before 5.21 and 6.x before 6.15 allows remote authenticated users with "administer site-wide contact form" permissions to inject arbitrary web script...
CVE-2008-4369
CVE-2008-4369 corresponds to a SQL injection vulnerability in the Availscript Photo Album’s pics.php. The vulnerability is triggered via the sid parameter, allowing remote attackers to execute arbitrary SQL commands. The NVD entry lists the impact as Partial confidentiality, integrity, and availa...
CVE-2008-4369
creationtimestamp| type| source ---|---|--- 2008-09-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6411...
ExtremeZ-IP Version Detection
Binary data 4369.prm...
CVE-2007-4369
SOTEeSKLEP (before 4.0) contains a directory traversal flaw in the go/_files component. The vulnerability allows remote attackers to read arbitrary files by supplying a \.. (dot dot) in the file parameter. This originates from inadequate validation of path traversal in the affected module, leadin...
CVE-2006-4369
CVE-2006-4369 affects IntegraMOD Portal 2.x and earlier. The vulnerability resides in the PHP file includes/functions_portal.php and is exploitable when magic_quotes_gpc is disabled . An attacker can perform an absolute path traversal by supplying an absolute path to the phpbb_root_path parameter...
CVE-2005-4369
CVE-2005-4369 describes a cross-site scripting (XSS) vulnerability in Acuity CMS 2.6.2. The issue allows remote attackers to inject arbitrary web script or HTML through unspecified search parameters, potentially via strSearchKeywords to browse.asp. The NVD data lists a CVSS v2 base score of 4.3 (...
