68 matches found
CVE-2009-4502
The CVE affects Zabbix Agent prior to 1.6.7 running on FreeBSD or Solaris, where the NET_TCP_LISTEN function in net.c enables remote attackers to bypass EnableRemoteCommands and run arbitrary shell commands via metacharacters in the net.tcp.listen argument. The vulnerability is limited to trusted...
CVE-2008-4502
DataFeedFile (DFF) PHP Framework API is affected by CVE-2008-4502 via multiple PHP remote file inclusion vulnerabilities. The flaw arises from allowing a URL in DFF_config[dir_include] to be included by seven include/ files (DFF_affiliate_client_API.php, DFF_featured_prdt.func.php, DFF_mer.func.p...
CVE-2007-4502
The CVE-2007-4502 entry concerns Joomla! (BibTeX component, com_jombib) versions 1.3 and earlier, where an SQL injection vulnerability exists in index.php exposed via the afilter parameter. The underlying issue is a flawed handling of afilter that allows remote attackers to execute arbitrary SQL ...
CVE-2005-4502
CVE-2005-4502 is a cross-site scripting (XSS) vulnerability in httprint v202 and possibly earlier versions prior to v301. The issue permits remote attackers to inject arbitrary web script or HTML through the Server field in an HTTP response that is not sanitized before display to users. Public re...
CVE-2005-4502
Cross-site scripting XSS vulnerability in httprint v202, and possibly other versions before v301, allows remote attackers to inject arbitrary web script or HTML via the Server field in an HTTP response, which is not sanitized before being displayed to the user...
Microsoft Publisher Remote Code Execution Vulnerability (951208)
Binary data 4502.prm...