72 matches found
CVE-2011-4547
CVE-2011-4547 covers multiple cross-site scripting (XSS) vulnerabilities in Ze n Cart 1.3.9h. The issues affect includes/templates/template_default/common/tpl_header_test_info.php when debugging is enabled, enabling an attacker to inject arbitrary script/HTML via the (1) main_page parameter or (2...
SuSE 11.1 Security Update : rdesktop (SAT Patch Number 4547)
The following bug has been fixed : - A malicious server could access any file on clients connecting to it if the client shared some ressource. CVE-2011-1595 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 upda...
CVE-2010-4547
CVE-2010-4547 affects IBM Lotus Notes Traveler before 8.5.1.3. In a multidomain environment, the server fails to properly apply policy documents to mobile users from a different Domino domain, allowing remote authenticated users to bypass access restrictions by using credentials from another doma...
CVE-2009-4547
CVE-2009-4547 documents multiple XSS vulnerabilities in ViArt CMS 3.x . The flaws let remote attackers inject arbitrary JavaScript/HTML via user-supplied parameters: (1) category_id to forums.php, or (2) forum_id to forum.php, or (3) forum_topic_new.php . The root cause is cross-site scripting in...
CVE-2009-4547
Multiple cross-site scripting XSS vulnerabilities in ViArt CMS 3.x allow remote attackers to inject arbitrary web script or HTML via the 1 categoryid parameter to forums.php, or the forumid parameter to 2 forum.php or 3 forumtopicnew.php...
CVE-2009-4547
creationtimestamp| type| source ---|---|--- 2009-08-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33157 2009-08-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33155 2009-08-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33158...
CVE-2008-4547
The CVE-2008-4547 entry describes a heap-based buffer overflow in the PdvrAtl.PdvrOcx.1 ActiveX control (pdvratl.dll) within DVRHOST Web CMS OCX 1.0.1.25. The vulnerability allows remote attackers to execute arbitrary code by supplying an excessively long second argument to the TimeSpanFormat met...
CVE-2008-4547
Heap-based buffer overflow in the PdvrAtl.PdvrOcx.1 ActiveX control pdvratl.dll in DVRHOST Web CMS OCX 1.0.1.25 allows remote attackers to execute arbitrary code via a long second argument to the TimeSpanFormat method...
CVE-2007-4547
Unreal Commander 0.92 build 565 and 573 is vulnerable to a heap-memory leakage issue during extraction from archives with malformed size info in the file header. The affected component writes portions of heap memory into local files, potentially enabling a user with sufficient privileges or acces...
CVE-2006-4547
CVE-2006-4547 affects Lyris ListManager 8.95. The vulnerability arises when an authenticated remote user adds a new user with a name containing a single quote, which can cause the underlying SQL query to be exposed or manipulated, indicating an SQL injection or error-driven information disclosure...
CVE-2005-4547
The vulnerability is a Cross-site Scripting (XSS) issue in eggblog 2.0, specifically in home/search.php, where the q parameter used by Keyword and Search fields can allow remote attackers to execute arbitrary SQL commands. The description notes XSS as the vulnerability type but the impact is stat...
CVE-2018-4547
This CVE-2018-4547 entry is rejected/not used and does not represent an active vulnerability.