55 matches found
Code injection
appconfig.php in ownCloud before 4.0.6 does not properly restrict access, which allows remote authenticated users to edit app configurations via unspecified vectors. NOTE: this can be leveraged by unauthenticated remote attackers using CVE-2012-4393...
Auth bypass in index.php - ownCloud
ownCloud 4.0.6 and all versions previous to this doesn't sufficiently verify whether a request to appconfig.php was sent by an admin, which allows remote authenticated users to edit app configurations. NOTE: this can be leveraged by unauthenticated remote attackers using CVE-2012-4393. Affected...
Server: Auth bypass in index.php
ownCloud 4.0.6 and all versions previous to this doesn't sufficiently verify whether a request to appconfig.php was sent by an admin, which allows remote authenticated users to edit app configurations. NOTE: this can be leveraged by unauthenticated remote attackers using CVE-2012-4393. For more...
CVE-2010-4393
RealNetworks RealPlayer vulnerability CVE-2010-4393 involves a heap-based buffer overflow in vidplin.dll when parsing AVI headers. Affected products include RealPlayer 11.0–11.1 and 14.0.x before 14.0.2, and RealPlayer SP 1.0–1.1.5. The issue permits remote code execution via a crafted AVI header...
CVE-2009-4393
SQL injection vulnerability in the Document Directorys danpdocumentdirs extension 1.10.7 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2009-4393
The CVE-2009-4393 entry describes a SQL injection vulnerability in the TYPO3 extension Document Directorys (danp_documentdirs) version 1.10.7 and earlier. The flaw permits remote attackers to execute arbitrary SQL commands via unspecified vectors, affecting affected TYPO3 installations using this...
CVE-2008-4393
CVE-2008-4393 affects VeriSign Kontiki Delivery Management System (DMS) 5.0 and earlier. The vulnerability is an XSS in which an attacker can inject arbitrary script via the action parameter to zodiac/servlet/zodiac, enabling remote script execution in the victim’s browser. The issue stems from u...
verisign-xss.txt
VeriSign Kontiki Delivery Management System DMS Cross-Site Scripting Vulnerability CVE Number: CVE-2008-4393 Vulnerability Type / Importance: XSS / Medium Problem discovered: September 24th 2007 Vendor contacted: September 26th 2007 Advisory published: March 28th 2008 Abstract The Kontiki Deliver...
KLA10240 CI vulnerability in Kontiki DMS
An XSS vulnerability was found in Kontiki DMS. By exploiting this vulnerability malicious users can inject arbitrary web script. This vulnerability can be exploited remotely via a specially designed call. Original advisories - Related products Kontiki-Delivery-Management-System CVE list...
Mobilink Monitor Server Detection
Binary data 4393.prm...
CVE-2007-4393
The CVE-2007-4393 entry describes a local privilege issue in SUSE Linux where the orarun installation script adds the oracle user to the disk group before 20070810, allowing that local oracle user to read or write raw disk partitions. The vulnerability arises from disk group membership enabling a...
CVE-2006-4393
CVE-2006-4393 - Apple Mac OS X 10.4.x (10.4 through 10.4.7) : The LoginWindow component is affected when Fast User Switching is enabled, allowing local users to access Kerberos tickets of other users. This is described as an unspecified vulnerability in the LoginWindow that leads to ticket leakag...
Mac OS X Multiple Vulnerabilities (Security Update 2006-006)
The remote host is running a version of Mac OS X 10.3 which does not have the security update 2006-006 applied. Security Update 2006-006 contains several security fixes for the following programs : - CFNetwork - Flash Player - QuickDraw Manager - SASL - WebCore C Tenable Network Security, Inc. if...
CVE-2005-4393
CVE-2005-4393 describes a cross-site scripting (XSS) vulnerability in the show.cfm component of the e-publish CMS, version 2.0 and earlier. The underlying issue allows remote attackers to inject arbitrary web script or HTML by supplying the parameters (1) obcatid and (2) comid). Affected product:...
