75 matches found
Invision Power Board 'core.php'未明安全漏洞
Bugtraq ID:56288 CVE ID:CVE-2012-4547 Invision Power Board是一款流行的PHP论坛程序。 Invision Power Board中的admin/sources/base/core.php存在一个未明安全漏洞，目前没有详细漏洞细节提供。 0 IP.Board Invision Power Board 3.x 厂商解决方案 用户可参考如下厂商提供的安全公告获得补丁信息：...
Cisco Linksys PTZ Internet Video Camera PlayerPT ActiveX Overflow
Added: 04/19/2012 BID: 52673 OSVDB: 80297 Background The Cisco WVC200 Wireless-G PTZ Internet Video Camera sends live video through the Internet to a web browser anywhere in the world. Viewers can access the video stream through an HTTP service, which requires an ActiveX client to be installed in...
Cisco Linksys PTZ Internet Video Camera PlayerPT ActiveX Overflow
Added: 04/19/2012 BID: 52673 OSVDB: 80297 Background The Cisco WVC200 Wireless-G PTZ Internet Video Camera sends live video through the Internet to a web browser anywhere in the world. Viewers can access the video stream through an HTTP service, which requires an ActiveX client to be installed in...
CVE-2011-4547
CVE-2011-4547 covers multiple cross-site scripting (XSS) vulnerabilities in Ze n Cart 1.3.9h. The issues affect includes/templates/template_default/common/tpl_header_test_info.php when debugging is enabled, enabling an attacker to inject arbitrary script/HTML via the (1) main_page parameter or (2...
SuSE 11.1 Security Update : rdesktop (SAT Patch Number 4547)
The following bug has been fixed : - A malicious server could access any file on clients connecting to it if the client shared some ressource. CVE-2011-1595 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 upda...
CVE-2010-4547
CVE-2010-4547 affects IBM Lotus Notes Traveler before 8.5.1.3. In a multidomain environment, the server fails to properly apply policy documents to mobile users from a different Domino domain, allowing remote authenticated users to bypass access restrictions by using credentials from another doma...
CVE-2009-4547
Multiple cross-site scripting XSS vulnerabilities in ViArt CMS 3.x allow remote attackers to inject arbitrary web script or HTML via the 1 categoryid parameter to forums.php, or the forumid parameter to 2 forum.php or 3 forumtopicnew.php...
CVE-2009-4547
CVE-2009-4547 documents multiple XSS vulnerabilities in ViArt CMS 3.x . The flaws let remote attackers inject arbitrary JavaScript/HTML via user-supplied parameters: (1) category_id to forums.php, or (2) forum_id to forum.php, or (3) forum_topic_new.php . The root cause is cross-site scripting in...
CVE-2009-4547
creationtimestamp| type| source ---|---|--- 2009-08-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33157 2009-08-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33155 2009-08-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33158...
CVE-2008-4547
Heap-based buffer overflow in the PdvrAtl.PdvrOcx.1 ActiveX control pdvratl.dll in DVRHOST Web CMS OCX 1.0.1.25 allows remote attackers to execute arbitrary code via a long second argument to the TimeSpanFormat method...
CVE-2008-4547
The CVE-2008-4547 entry describes a heap-based buffer overflow in the PdvrAtl.PdvrOcx.1 ActiveX control (pdvratl.dll) within DVRHOST Web CMS OCX 1.0.1.25. The vulnerability allows remote attackers to execute arbitrary code by supplying an excessively long second argument to the TimeSpanFormat met...
CVE-2007-4547
Unreal Commander 0.92 build 565 and 573 is vulnerable to a heap-memory leakage issue during extraction from archives with malformed size info in the file header. The affected component writes portions of heap memory into local files, potentially enabling a user with sufficient privileges or acces...
CVE-2006-4547
CVE-2006-4547 affects Lyris ListManager 8.95. The vulnerability arises when an authenticated remote user adds a new user with a name containing a single quote, which can cause the underlying SQL query to be exposed or manipulated, indicating an SQL injection or error-driven information disclosure...
CVE-2005-4547
The vulnerability is a Cross-site Scripting (XSS) issue in eggblog 2.0, specifically in home/search.php, where the q parameter used by Keyword and Search fields can allow remote attackers to execute arbitrary SQL commands. The description notes XSS as the vulnerability type but the impact is stat...