96 matches found
CVE-2012-4477
Unspecified vulnerability in the Drag & Drop Gallery module 6.x for Drupal allows remote attackers to bypass access restrictions via unknown attack vectors...
CVE-2012-4477
Affected software: Drupal Drag & Drop Gallery module (6.x). Vulnerability type: Access bypass in the module’s handling of uploads and access controls (CVE-2012-4477). Root cause: unresolved access-control flaws in the Drag & Drop Gallery code path that can allow remote attackers to bypass restric...
CVE-2009-4477
SQL injection vulnerability in page.html in Xstate Real Estate 1.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter...
CVE-2009-4477
SQL injection vulnerability in page.html in Xstate Real Estate 1.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter...
CVE-2009-4477
The CVE-2009-4477 entry corresponds to a SQL injection in page.html of Xstate Real Estate 1.0, exploitable via the pid parameter. The vulnerability is network-accessible, with low attack complexity and no authentication required, leading to partial confidentiality, integrity, and availability imp...
CVE-2009-4477
creationtimestamp| type| source ---|---|--- 2009-09-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9565...
[SECURITY] [DSA 1648-1] New mon packages fix insecure temporary files
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1648-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst October 08, 2008 http://www.debian.org/security/faq -...
Debian Security Advisory DSA 1648-1 (mon)
The remote host is missing an update to mon announced via advisory DSA 1648-1. OpenVAS Vulnerability Test $Id: deb16481.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1648-1 mon Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
CVE-2008-4477
The CVE pertains to the mon daemon (version 0.99.2) where the test.alert script creates insecure temporary files, allowing a local user to overwrite arbitrary files via a symlink attack on test.alert.log. This results in a local denial of service. Public details indicate the issue is fixed in Deb...
CVE-2008-4477
Removed by vendor...
SuSE 10 Security Update : OpenSSL (ZYPP Patch Number 4477)
This update of openssl fixes a off-by-one buffer overflow in function SSLgetsharedciphers. This vulnerability potentially allows remote code execution; depending on memory layout of the process. CVE-2007-5135 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin...
CVE-2006-4477
CVE-2006-4477 involves multiple PHP remote file inclusion vulnerabilities in Visual Shapers ezContents 2.0.3. The issue allows remote attackers to execute arbitrary PHP code by supplying an empty GLOBALS[rootdp] or a URL in the GLOBALS[admin_home] parameter (across files: diary/event_list.php, ga...
CVE-2005-4477
The CVE-2005-4477 entry documents a Cross-site Scripting (XSS) vulnerability in papaya CMS 4.0.4 and earlier, exploitable via the bab[searchfor] parameter to inject arbitrary script/HTML. Affected software: papaya CMS (versions up to 4.0.4 and earlier). Root cause: input handling in the bab[searc...
MS:DE8631F5-7414-4477-B143-F352E417A118
...