CVE-2008-4454

CVE-2008-4454 concerns EKINdesigns MySQL Quick Admin 1.5.5. The connected sources confirm a directory traversal vulnerability where remote attackers can read and potentially execute arbitrary files by injecting a .. (dot dot) in the lang parameter to actions.php. This is a server-side path traver...

CVE-2008-4454

creationtimestamp| type| source ---|---|--- 2008-10-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6641 2008-11-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7020...

FreeBSD Ports: hlstats

The remote host is missing an update to the system as announced in the referenced advisory. VID 09639ccc-3abb-11db-81e1-000e0c2e438a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Sympa < 5.4 Content-Type Header Remote DoS

Binary data 4454.prm...

CVE-2007-4454

Eval injection vulnerability in environment.php in Olate Download od 3.4.1 allows context-dependent attackers to execute arbitrary code via a crafted version string, as referenced by the 1 PDO::ATTRSERVERVERSION or 2 PDO::ATTRCLIENTVERSION attribute...

CVE-2007-4454

CVE-2007-4454 affects Olate Download (od) 3.4.1 via an eval injection in environment.php. A crafted version string can cause code execution, using either PDO::ATTR_SERVER_VERSION or PDO::ATTR_CLIENT_VERSION. The available documents confirm the vulnerability and potential impact; no remediation de...

CVE-2007-4454

Eval injection vulnerability in environment.php in Olate Download od 3.4.1 allows context-dependent attackers to execute arbitrary code via a crafted version string, as referenced by the 1 PDO::ATTRSERVERVERSION or 2 PDO::ATTRCLIENTVERSION attribute...

CVE-2006-4454

CVE-2006-4454 describes a cross-site scripting (XSS) vulnerability in hlstats.php of HLstats 1.34 . The issue allows remote attackers to inject arbitrary script/HTML through the q parameter. Connected sources corroborate an XSS risk in hlstats with no explicit exploitation details or widely confi...

CVE-2005-4454

CVE-2005-4454 affects LiveJournal’s cleanhtml.pl 1.129 prior to Dec 7, 2005. The issue arises when the cleancss option is enabled: a backslash in a javascript: URL within a style property can bypass the javascript check and be rendered as script in browsers that permit scripting in styles, enabli...