CVE-2009-4382

Cross-site scripting XSS vulnerability in module.php in PHPFABER CMS, possibly 1.3.36, allows remote attackers to inject arbitrary web script or HTML via the mod parameter...

CVE-2009-4382

CVE-2009-4382 affects phpFaber CMS, likely in module.php, where user-supplied mod parameter enables cross-site scripting (XSS). Public records indicate PHPFaber CMS 1.3.36 is vulnerable; root cause is insufficient sanitization of input, allowing arbitrary script/HTML injection. The vulnerability ...

CVE-2009-4382

creationtimestamp| type| source ---|---|--- 2009-12-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33404...

CVE-2008-4382

Affected software: Konqueror in KDE 3.5.9. The vulnerability is triggered by JavaScript calling alert() with a URL-encoded string containing a large number of invalid characters, leading to an application crash (DoS). The supplied documents do not provide a specific patch/version for remediation....

Gentoo Security Advisory GLSA 200803-08 (win32codecs)

The remote host is missing updates announced in advisory GLSA 200803-08. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2007-4382

CVE-2007-4382 affects CounterPath X-Lite 3.0 34025 and possibly eyeBeam, where a SIP INVITE message lacking a Content-Type header can cause a device crash (remote denial of service). The available documents confirm the vulnerable component and the attack vector (SIP INVITE without Content-Type) a...

CVE-2006-4382

CVE-2006-4382 affects Apple QuickTime prior to 7.1.3 (Mac OS X and Windows). Multiple vulnerabilities in QuickTime formats (MOV, FLC, SGI, H.264, FPX) include buffer/heap/integer overflows that could enable remote code execution when a user opens a crafted file. The advisories consistently state ...

CVE-2005-4382

The CVE-2005-4382 entry describes an SQL injection vulnerability in CitySoft Community Enterprise 4.x. The vulnerability allows remote attackers to execute arbitrary SQL commands by supplying crafted values for (1) nodeID, (2) pageID, (3) ID, (4) parentid parameters to index.cfm and (5) documentF...