CVE-2011-4399

CVE-2011-4399 is rejected and not used; it does not represent an active vulnerability.

CVE-2012-4399

The CVE-2012-4399 issue affects CakePHP’s Xml class: versions 2.1.x prior to 2.1.5 and 2.2.x prior to 2.2.1 are vulnerable to an XML external entity (XXE) injection that lets remote attackers read arbitrary files via XML data containing external entity references. Root cause is improper handling ...

CVE-2012-4399

The Xml class in CakePHP 2.1.x before 2.1.5 and 2.2.x before 2.2.1 allows remote attackers to read arbitrary files via XML data containing external entity references, aka an XML external entity XXE injection attack...

CVE-2012-4399

creationtimestamp| type| source ---|---|--- 2012-07-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/19863...

CVE-2010-4399

DynPG CMS versions 4.1.1 and 4.2.0 expose a local file inclusion (LFI) vulnerability in languages.inc.php via the CHG_DYNPG_SET_LANGUAGE parameter to index.php. The root cause is lack of input sanitization before including files, enabling a remote attacker to read arbitrary files through director...

Multiple Vulnerabilities in DynPG

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in DynPG which could be exploited to perform SQL injection attacks, disclose potentially sensitive information and compromise vulnerable system. 1 Installation path disclosure weakness in in DynPG: CVE-2010-4401 The...

CVE-2009-4399

SQL injection vulnerability in the Parish of the Holy Spirit Religious Art Gallery hsreligiousartgallery extension 0.1.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2009-4399

CVE-2009-4399 affects the TYPO3 hs_religiousartgallery extension up to version 0.1.2. The root cause is an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Descriptions consistently state a SQL injection flaw in this extension; no...

CA-ArcServe

CA ArcServe is prone to a remote buffer overflow because it fails to perform adequate boundary-checks on user-supplied data. Successfully exploiting will allow an attacker to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a...

Apple Workgroup Manager fails to properly enable ShadowHash passwords

Overview Apple Workgroup Manager fails to properly enable ShadowHash passwords in a NetInfo parent. Workgroup Manager may appear to use ShadowHash passwords when crypt is used. Description Workgroup Manager is a system adimistration tool in Apple Mac OS X Server that manages users, groups, and...

Mac OS X Multiple Vulnerabilities (Security Update 2006-006)

The remote host is running a version of Mac OS X 10.3 which does not have the security update 2006-006 applied. Security Update 2006-006 contains several security fixes for the following programs : - CFNetwork - Flash Player - QuickDraw Manager - SASL - WebCore C Tenable Network Security, Inc. if...

CVE-2005-4399

CVE-2005-4399 concerns a cross-site scripting (XSS) vulnerability in Libertas Enterprise CMS, versions 3.0 and earlier. The flaw is in the search/index.php handler and allows remote attackers to inject arbitrary web script or HTML via the page_search parameter. The information available does not ...