99 matches found
openSUSE Security Update : phpMyAdmin (openSUSE-SU-2014:1069-1)
This phpMyAdmin update addresses several security and non security issues : - This is a phpMyAdmin version upgrade bnc892401: From 4.1.14.3 : - sf4501 security XSS in table browse page CVE-2014-5273 - sf4502 security Self-XSS in enum value editor CVE-2014-5273 - sf4503 security Self-XSSes in...
Fedora Update for libgadu FEDORA-2014-6645
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for libgadu FEDORA-2014-6687
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for libgadu FEDORA-2014-2341
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for libgadu FEDORA-2013-23517
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2012-4488
CVE-2012-4488 – Drupal Location module) affected: Location module 6.x (before 6.x-3.2) and 7.x (before 7.x-3.0-alpha1). Issue: improper access control in the location search page allows remote attackers to read node or user results. Impact: exposure of node/user data due to insufficient permissio...
CVE-2010-4488
CVE-2010-4488 affects Google Chrome before 8.0.552.215, which does not properly handle HTTP proxy authentication, allowing remote attackers to cause a denial of service (application crash) via unspecified vectors. The connected OpenVAS entries reference Google Chrome multiple vulnerabilities from...
CVE-2009-4488
Varnish 2.0.6 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator. NOTE: the vendo...
CVE-2009-4488
Varnish 2.0.6 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator. NOTE: the vendo...
CVE-2009-4488
Varnish 2.0.6 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator. NOTE: the vendo...
CVE-2009-4488
Varnish 2.0.6 is affected by CVE-2009-4488: it writes to a log file without sanitizing non-printable characters, which could let remote attackers modify a window title or potentially execute arbitrary commands or overwrite files via an HTTP request containing an escape sequence for a terminal emu...
CVE-2009-4488
creationtimestamp| type| source ---|---|--- 2010-01-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33498 2025-01-21 17:00:38+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2421...
CVE-2008-4488
The CVE-2008-4488 entry concerns a Cross-site Scripting (XSS) vulnerability in Atarone CMS 1.2.0. The flaw is located in ap-pages.php, where user-supplied input in the 1) name and 2) id parameters can be injected to execute arbitrary web script or HTML. This is described across multiple sources (...
Remote file inclusion
ExBB Italia 0.22 and earlier only checks GET requests that use the QUERYSTRING for certain path manipulations, which allows remote attackers to bypass this check via 1 POST or 2 COOKIE variables, a different vector than CVE-2006-4488. NOTE: this can be leveraged to conduct PHP remote file inclusi...
CVE-2007-4488
CVE-2007-4488 affects the Siemens Gigaset SE361 WLAN router running firmware 1.00.0. It contains two cross-site scripting vulnerabilities triggered by the URI portion following the filename: (1) a GIF filename leading to text-format display of the GIF and an unspecified denial-of-service (crash);...
CVE-2006-4488
PHP remote file inclusion vulnerability in modules/userstop/userstop.php in ExBB Italia 0.2 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the exbbhomepath parameter...
CVE-2006-4488
ExBB Italia
