94 matches found
CVE-2013-4489
CVE-2013-4489 affects the GitLab/Grit Ruby gem used in GitLab releases 5.2 before 5.4.1 and 6.x before 6.2.3. The vulnerability arises in the code search feature (app/contexts/search_context.rb): unsanitized input from the code search box can be evaluated by the shell, allowing remote authenticat...
CVE-2012-4489
CVE-2012-4489 describes an open redirect in Drupal’s Secure Login module (7.x-1.x) prior to 7.x-1.3, via the q parameter in securelogin_secure_redirect. An unauthenticated user could lure victims to phishing sites by supplying a malicious redirect URL. Supported by NVD entry and multiple vendor r...
Ubuntu Update for libvpx vulnerability USN-1087-1
Ubuntu Update for Linux kernel vulnerabilities USN-1087-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN10871.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for libvpx vulnerability USN-1087-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH,...
CVE-2010-4489
libvpx, as used in Google Chrome before 8.0.552.215 and possibly other products, allows remote attackers to cause a denial of service out-of-bounds read via a crafted WebM video. NOTE: this vulnerability exists because of a regression...
CVE-2010-4489
CVE-2010-4489 concerns libvpx used in Google Chrome prior to 8.0.552.215 (and possibly other products). The vulnerability stems from a regression that allows a crafted WebM video to trigger an out-of-bounds read, enabling a remote denial of service. The OpenVAS and vendor advisories reference lib...
CVE-2009-4489
CVE-2009-4489 (Cherokee) : Cherokee 0.99.32 and earlier fails to sanitize non‑printable characters in log files, allowing an HTTP request with escape sequences to modify a window title or potentially execute commands/overwrite files. The issue is a log‑escape vulnerability affecting Cherokee and ...
CVE-2009-4489
creationtimestamp| type| source ---|---|--- 2010-01-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33501...
CVE-2008-4489
CVE-2008-4489 describes a directory traversal vulnerability in Atarone CMS 1.2.0 (ap-save.php). Remote attackers can use directory traversal sequences in the theme_chosen parameter to include and execute arbitrary local files. Exploitation status is not detailed in the provided documents; no reme...
CVE-2007-4489
The CVE-2007-4489 issue affects the IUAComFormX ActiveX control in uacomx.ocx 2.0.1, used by the eCentrex VOIP Client module. The root cause is a buffer overflow triggered by a long Username argument to the ReInit method, which can allow remote code execution. The available connected documents co...
Remote file inclusion
PHP remote file inclusion vulnerability in crontab/runbilling.php in MiniBill 1.2.5 allows remote attackers to execute arbitrary PHP code via a URL in the configincludedir parameter, a different vector than CVE-2006-4489...
CVE-2005-4489
CVE-2005-4489 describes a Cross-site Scripting (XSS) vulnerability in Scoop 1.1 RC1 and earlier, where remote attackers can inject arbitrary web script or HTML via the (1) type, (2) count parameters, and (3) the query string in a story. Affected product is Scoop (version 1.1 RC1 and earlier); und...
ASP-Nuke伪造Cookie导致信息泄露漏洞
BugCVE: CVE-2002-0523 BUGTRAQ: 4489 ASP-Nuke存在设计问题，可导致攻击者获得主机相关敏感信息。 攻击者可以本地修改Cookie信息并提交，导致主机返回所有当前登陆用户列表或者返回包含WEB ROOT路径的错误信息。 攻击者可以利用这些信息进一步对系统进行攻击。 ASP-Nuke RC1-RC2 厂商补丁： ASP-Nuke -------- 目前厂商已经在最新版本的软件中修补了此漏洞，请到厂商的主页获取最新版本： http://www.asp-nuke.com/downloads.asp...
