CVE-2009-4446

Cross-site scripting XSS vulnerability in admin.php in phpInstantGallery 1.1 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

CVE-2009-4446

CVE-2009-4446 describes an XSS in phpInstantGallery 1.1 (admin.php) exploitable via PATH_INFO. Exploitation by remote attackers is possible without authentication; impacts include partial integrity breach and no confidentiality/availability effects per CVSS? (Base 4.3, MEDIUM). Connected document...

CVE-2009-4446

creationtimestamp| type| source ---|---|--- 2009-12-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33445...

CVE-2008-4446

CVE-2008-4446 concerns a cross-site scripting (XSS) vulnerability in Nucleus EUC-JP Japanese Edition. The Nucleus CMS versions affected are v3.31 SP1 EUC-JP and earlier. The underlying issue is an XSS flaw that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2007-4446

Format string vulnerability in the server in Toribash 2.71 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the NICK command client nickname when entering a game...

CVE-2007-4446

CVE-2007-4446 affects the Toribash server (2.71 and earlier). The vulnerability is a format string issue in the NICK command (client nickname) that can allow remote attackers to execute arbitrary code. The NVD entry lists a CVSS v2 base score of 7.5 (HIGH) with network access, low attack complexi...

MS06-067: Cumulative Security Update for Internet Explorer (922760)

The remote host is missing the IE cumulative security update 922760. The remote version of IE is vulnerable to several flaws that could allow an attacker to execute arbitrary code on the remote host. Note that Microsoft has re-released this hotfix as its initial version contained a buffer overflo...

CVE-2005-4446

The CVE-2005-4446 entry documents a Cross-site Scripting (XSS) vulnerability in index.asp of ASPBite 8.x, where an attacker can inject arbitrary web script or HTML via the strSearch parameter. The concrete vulnerability is a reflected/stored XSS in a web application component (index.asp) that pro...