Lucene search
+L

72 matches found

CVE
CVE
added 2011/11/29 12:0 a.m.53 views

CVE-2011-4547

CVE-2011-4547 covers multiple cross-site scripting (XSS) vulnerabilities in Ze n Cart 1.3.9h. The issues affect includes/templates/template_default/common/tpl_header_test_info.php when debugging is enabled, enabling an attacker to inject arbitrary script/HTML via the (1) main_page parameter or (2...

4.3CVSS5.8AI score0.01082EPSS
Exploits1References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2011/05/25 12:0 a.m.32 views

SuSE 11.1 Security Update : rdesktop (SAT Patch Number 4547)

The following bug has been fixed : - A malicious server could access any file on clients connecting to it if the client shared some ressource. CVE-2011-1595 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 upda...

4.3CVSS5.2AI score0.01094EPSS
Exploits1References4
CVE
CVE
added 2010/12/16 7:45 p.m.47 views

CVE-2010-4547

CVE-2010-4547 affects IBM Lotus Notes Traveler before 8.5.1.3. In a multidomain environment, the server fails to properly apply policy documents to mobile users from a different Domino domain, allowing remote authenticated users to bypass access restrictions by using credentials from another doma...

3.5CVSS6.3AI score0.009EPSS
Exploits0References3Affected Software1
CVE
CVE
added 2010/01/04 5:0 p.m.50 views

CVE-2009-4547

CVE-2009-4547 documents multiple XSS vulnerabilities in ViArt CMS 3.x . The flaws let remote attackers inject arbitrary JavaScript/HTML via user-supplied parameters: (1) category_id to forums.php, or (2) forum_id to forum.php, or (3) forum_topic_new.php . The root cause is cross-site scripting in...

4.3CVSS5.9AI score0.01846EPSS
Exploits1References7Affected Software1
Cvelist
Cvelist
added 2010/01/04 5:0 p.m.26 views

CVE-2009-4547

Multiple cross-site scripting XSS vulnerabilities in ViArt CMS 3.x allow remote attackers to inject arbitrary web script or HTML via the 1 categoryid parameter to forums.php, or the forumid parameter to 2 forum.php or 3 forumtopicnew.php...

5.8AI score0.01846EPSS
Exploits1References7
Circl
Circl
added 2009/08/10 12:0 a.m.5 views

CVE-2009-4547

creationtimestamp| type| source ---|---|--- 2009-08-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33157 2009-08-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33155 2009-08-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33158...

4.3CVSS5.8AI score0.01846EPSS
Exploits1References3
CVE
CVE
added 2008/10/14 5:0 p.m.52 views

CVE-2008-4547

The CVE-2008-4547 entry describes a heap-based buffer overflow in the PdvrAtl.PdvrOcx.1 ActiveX control (pdvratl.dll) within DVRHOST Web CMS OCX 1.0.1.25. The vulnerability allows remote attackers to execute arbitrary code by supplying an excessively long second argument to the TimeSpanFormat met...

9.3CVSS8.1AI score0.11266EPSS
Exploits0References6Affected Software1
Cvelist
Cvelist
added 2008/10/14 5:0 p.m.19 views

CVE-2008-4547

Heap-based buffer overflow in the PdvrAtl.PdvrOcx.1 ActiveX control pdvratl.dll in DVRHOST Web CMS OCX 1.0.1.25 allows remote attackers to execute arbitrary code via a long second argument to the TimeSpanFormat method...

8.1AI score0.11266EPSS
Exploits0References6
CVE
CVE
added 2007/08/27 11:0 p.m.48 views

CVE-2007-4547

Unreal Commander 0.92 build 565 and 573 is vulnerable to a heap-memory leakage issue during extraction from archives with malformed size info in the file header. The affected component writes portions of heap memory into local files, potentially enabling a user with sufficient privileges or acces...

4.3CVSS5.9AI score0.01267EPSS
Exploits0References4Affected Software1
CVE
CVE
added 2006/09/06 12:0 a.m.36 views

CVE-2006-4547

CVE-2006-4547 affects Lyris ListManager 8.95. The vulnerability arises when an authenticated remote user adds a new user with a name containing a single quote, which can cause the underlying SQL query to be exposed or manipulated, indicating an SQL injection or error-driven information disclosure...

6.5CVSS7.1AI score0.00987EPSS
Exploits0References4Affected Software1
CVE
CVE
added 2005/12/28 11:0 a.m.51 views

CVE-2005-4547

The vulnerability is a Cross-site Scripting (XSS) issue in eggblog 2.0, specifically in home/search.php, where the q parameter used by Keyword and Search fields can allow remote attackers to execute arbitrary SQL commands. The description notes XSS as the vulnerability type but the impact is stat...

4.3CVSS7.2AI score0.01177EPSS
Exploits0References4Affected Software1
CVE
CVE
added 1976/01/01 12:0 a.m.18 views

CVE-2018-4547

This CVE-2018-4547 entry is rejected/not used and does not represent an active vulnerability.

6.8AI score
Exploits0
Rows per page
Query Builder