91 matches found
CVE-2009-4459
Redmine 0.8.7 and earlier uses the title tag before defining the character encoding in a meta tag, which allows remote attackers to conduct cross-site scripting XSS attacks and inject arbitrary script via UTF-7 encoded values in the title parameter to a new issue page, which may be interpreted as...
CVE-2009-4459
The CVE-2009-4459 issue affects Redmine 0.8.7 and earlier, where the title tag is defined before the character encoding meta tag. This allows XSS via UTF-7 encoded values in the title parameter on a new issue page, potentially interpreted as script by Internet Explorer 7/8. Debian backports show ...
CVE-2008-4459
SQL injection vulnerability in pickusers.php in the groups module in eXtrovert Thyme 1.3 allows remote attackers to execute arbitrary SQL commands via the unamesearch parameter. NOTE: some of these details are obtained from third party information...
CVE-2008-4459
SQL injection vulnerability in pickusers.php in the groups module in eXtrovert Thyme 1.3 allows remote attackers to execute arbitrary SQL commands via the unamesearch parameter. NOTE: some of these details are obtained from third party information...
CVE-2008-4459
The CVE-2008-4459 entry concerns the web app component eXtrovert Thyme 1.3 , specifically the pick_users.php (groups module) . It describes a SQL injection vulnerability exploitable via the uname_search parameter that could allow remote attackers to execute arbitrary SQL commands. The vulnerabili...
CVE-2008-4459
creationtimestamp| type| source ---|---|--- 2008-09-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32342...
CVE-2007-4459
Cisco IP Phone CVE-2007-4459 affects the 7940/7960 series with firmware up to P0S3-08-6-00 (and other SIP firmware before 8.7(0)). A remote, unauthenticated attacker on the voice VLAN can cause a denial of service resulting in a reboot by sending a specific sequence of malformed SIP messages (or ...
CVE-2006-4459
CVE-2006-4459 affects AnywhereUSB/5 1.80.00 due to an integer overflow in the USB string descriptor header size (1 byte), enabling local users to cause a denial of service (crash). The connected sources confirm the affected component and the root cause, but no exploitation details or remediation ...
VMware vmnat.exe/vmnet-natd Multiple FTP Command Remote Overflow
According to its version number, the VMware program on the remote host may allow an attacker to execute code on the system hosting the VMware instance. The vulnerability can be exploited by sending specially crafted FTP PORT and EPRT requests. To be exploitable, the VMware system must be configur...
CVE-2005-4459
The CVE-2005-4459 issue is a heap-based buffer overflow in VMware’s NAT service components vmnat.exe and vmnet-natd across several products (Workstation 5.5, GSX Server 3.2, ACE 1.0.1, Player 1.0). The flaw is triggered by malformed FTP PORT and EPRT commands processed by the NAT service, allowin...
