CVE-2011-4597

The SIP over UDP implementation in Asterisk Open Source 1.4.x before 1.4.43, 1.6.x before 1.6.2.21, and 1.8.x before 1.8.7.2 uses different port numbers for responses to invalid requests depending on whether a SIP username exists, which allows remote attackers to enumerate usernames via a series ...

CVE-2011-4597

The SIP over UDP implementation in Asterisk Open Source 1.4.x before 1.4.43, 1.6.x before 1.6.2.21, and 1.8.x before 1.8.7.2 uses different port numbers for responses to invalid requests depending on whether a SIP username exists, which allows remote attackers to enumerate usernames via a series ...

CVE-2011-4597

CVE-2011-4597 affects Asterisk Open Source SIP over UDP implementations in 1.4.x up to 1.4.43, 1.6.x up to 1.6.2.21, and 1.8.x up to 1.8.7.2. The vulnerability arises from using different port numbers for responses to invalid requests based on whether a SIP username exists, enabling remote attack...

PHP Inventory 1.3.1 Remote (Auth Bypass) SQL Injection Vulnerability

Advisory: PHP Inventory 1.3.1 Remote Auth Bypass SQL Injection Vulnerability Advisory ID: INFOSERVE-ADV2011-08 Author: Stefan Schurtz Contact: [email protected] Affected Software: Successfully tested on PHP Inventory 1.3.1 Vendor URL: http://www.phpwares.com/ Vendor Status: fixed CVE-ID:...

PHP Inventory 1.3.1 SQL Injection

Advisory: PHP Inventory 1.3.1 Remote Auth Bypass SQL Injection Vulnerability Advisory ID: INFOSERVE-ADV2011-08 Author: Stefan Schurtz Contact: [email protected] Affected Software: Successfully tested on PHP Inventory 1.3.1 Vendor URL: http://www.phpwares.com/ Vendor Status: fixed CVE-ID:...

CVE-2010-4597

Ecava IntegraXor HMI is affected by CVE-2010-4597 due to a stack-based buffer overflow in the save method of igcomm.dll (IntegraXor.Project ActiveX) prior to version 3.5.3900.10. An attacker could remotely trigger arbitrary code execution by sending a long string in the second argument. ICS-CERT ...

CVE-2010-4597

creationtimestamp| type| source ---|---|--- 2010-12-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15767...

CVE-2009-4597

The CVE-2009-4597 entry covers SQL injection flaws in PHP Inventory (notably versions around 1.2/1.3.x) in index.php. The vulnerabilities allow SQL commands to be injected through user_id in a user details action, and through user/password fields, enabling unauthorized data access via poorly sani...

CVE-2009-4597

creationtimestamp| type| source ---|---|--- 2009-12-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10370...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in iPei Guestbook 2.0 allows remote attackers to inject arbitrary web script or HTML via the pg parameter, a different vector than CVE-2005-4597...

CVE-2008-4597

Shindig-Integrator 5.x, a module for Drupal, does not properly restrict generated page access, which allows remote attackers to gain privileges via unspecified vectors...

Design/Logic Flaw

Unspecified vulnerability in Shindig-Integrator 5.x, a module for Drupal, has unspecified impact and remote attack vectors related to "numerous flaws" that are not related to XSS or access control, a different vulnerability than CVE-2008-4596 and CVE-2008-4597...

CVE-2008-4597

Shindig-Integrator 5.x, a module for Drupal, does not properly restrict generated page access, which allows remote attackers to gain privileges via unspecified vectors...

CVE-2008-4597

CVE-2008-4597 affects Shindig-Integrator 5.x, a Drupal module. The vulnerability stems from improper restriction of generated page access, allowing remote attackers to gain privileges via unspecified vectors. The core issue is an access-control bypass within the module’s page generation, leading ...

CVE-2007-4597

Technical details about CVE-2007-4597 are not publicly provided in the supplied connected documents; monitor for updates.

CVE-2006-4597

CVE-2006-4597 describes a SQL injection vulnerability in the devam.asp component of ICBlogger 2.0 and earlier , due to improper handling of the YID parameter. This flaw enables remote attackers to execute arbitrary SQL commands. The publicly available documents (NVD/NIST CVE entry and related CVE...

CVE-2005-4597

CVE-2005-4597: XSS in iPei Guestbook 1.7 (index.php) allowing remote attackers to inject arbitrary script/HTML via the email parameter when signing the guestbook. Root cause is reflected/scriptable output in the email field; affects iPei Guestbook 1.7. No remediation details provided in the suppl...

CVE-2018-4597

CVE-2018-4597 entry is rejected/not used by CNA; no active vulnerability details are provided.

MS:4B363039-8207-4597-8120-CAFEEDE65A23

...

MS:AD68ABC8-950E-4597-B4B6-BBC3366FE87A

...