71 matches found
CVE-2009-4490
CVE-2009-4490 affects mini_httpd 1.19. The flaw: logging non-printable characters without sanitization may let a remote attacker craft an HTTP request with an escape sequence to modify a window title and potentially execute arbitrary code or overwrite files. The Gentoo advisory GLSA 201206-27 des...
Acme thttpd and mini_httpd Terminal Escape Sequence in Logs Command Injection Vulnerability
Acme SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.100447";...
CVE-2009-4490
creationtimestamp| type| source ---|---|--- 2010-01-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33500...
CVE-2008-4490
Directory traversal vulnerability in config.inc.php in phpAbook 0.8.8b and earlier, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the userInfo cookie...
CVE-2008-4490
creationtimestamp| type| source ---|---|--- 2008-10-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6679...
Sun Directory Version Detection
Binary data 4490.prm...
openSUSE 10 Security Update : fetchmail (fetchmail-4490)
This update fixes a remote denial-of-service attack. CVE-2007-4565 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update fetchmail-4490. The text description of this plugin is C SUSE LLC...
CVE-2006-4490
CVE-2006-4490 affects Cybozu Office (pre-6.6 Build 1.3) and Share 360 (pre-2.5 Build 0.3). Affected components allow directory traversal via the id parameter in scripts/cbag/ag.exe or scripts/s360v2/s360.exe, enabling remote authenticated users to read arbitrary files. Root cause: improper valida...
CVE-2005-4490
CVE-2005-4490 affects SCOOP! 2.3 and earlier, with multiple XSS vulnerabilities. An attacker can inject arbitrary script/HTML via parameters to articleSearch.asp (keyword, invalid parameter); lostPassword.asp (username, invalid parameter); account_login.asp (Username, Password, invalid parameter)...
