73 matches found
CVE-2009-4591
SQL injection vulnerability in Basic Analysis and Security Engine BASE before 1.4.4 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2009-4591
SQL injection vulnerability in Basic Analysis and Security Engine BASE before 1.4.4 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2009-4591
The affected product is Basic Analysis and Security Engine (BASE) prior to 1.4.4. It contains input-validation flaws, including an SQL-injection vulnerability that allows remote attackers to execute arbitrary SQL commands via unspecified vectors. The issue is documented across multiple sources (C...
CVE-2008-4591
CVE-2008-4591: PhpWebGallery 1.3.4 is affected by multiple XSS in admin/include/isadmin.inc.php. The vulnerabilities allow injecting arbitrary script/HTML via the parameters lang[access_forbiden] and lang[ident_title]. Connected records confirm affected software and component/file path. The preci...
CVE-2008-4591
creationtimestamp| type| source ---|---|--- 2008-09-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6425...
Fedora 7 : exiv2-0.15-5.fc7 (2007-4591)
Mon Dec 17 2007 Rex Dieter 0.15-5 - CVE-2007-6353 425922 - Tue Sep 18 2007 Rex Dieter 0.15-4 - -libs: -Requires: %name - Tue Aug 21 2007 Rex Dieter 0.15-3 - -libs subpkg to be multilib-friendlier f8+ - Sat Aug 11 2007 Rex Dieter 0.15-2 - License: GPLv2+ - Thu Jul 12 2007 Rex Dieter 0.15-1 -...
VMware Workstation < 5.5.5 and Server < 1.0.4 Multiple Vulnerabilities
The version of VMware Workstation/Server installed on the remote host is affected by multiple vulnerabilities, including a privelege elevation vulnerability that allows a guest to take over a host and a buffer overflow vulnerability in the DHCP daemon. The buffer overlflow in the DHCP server may...
CVE-2007-4591
CVE-2007-4591 concerns a local denial of service (host OS crash) and potential privilege escalation in VMware Workstation 6.0. The issue is tied to the driver vstor-ws60.sys; by sending a small file buffer size value to the FsSetVolumeInformation IOCTL handler with an FsSetFileInformation subcode...
CVE-2006-4591
Multiple PHP remote file inclusion vulnerabilities in AlstraSoft Template Seller, and possibly AltraSoft Template Seller Pro 3.25, allow remote attackers to execute arbitrary PHP code via a URL in the configtemplatepath parameter to 1 payment/paymentresult.php or 2 /payment/spuserresult.php...
CVE-2006-4591
CVE-2006-4591 affects AlstraSoft Template Seller (and possibly AltraSoft Template Seller Pro 3.25). The vulnerability is a PHP remote file inclusion via a URL in config[template_path] used by payment_result.php and spuser_result.php, enabling arbitrary PHP code execution. NVD lists a CVSS2 base s...
CVE-2005-4591
Heap-based buffer overflow in bogofilter 0.96.2, 0.95.2, 0.94.14, 0.94.12, and other versions from 0.93.5 to 0.96.2, when using Unicode databases, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via "invalid input sequences" that lead to heap...
