141 matches found
CentOS 7 : php (CESA-2015:1135)
Updated php packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings,...
Important: Red Hat Security Advisory: php security and bug fix update
Updated php packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings,...
Joomla Component com_jphoto SQL Injection (CVE-2009-4598)
An SQL injection vulnerability has been reported in Corephp Com Jphoto. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
CVE-2014-4598
Cross-site scripting (XSS) in the WordPress wp-tmkm-amazon-plugin (wp-tmkm-amazon-search.php) 1.5b and earlier via the AID parameter. Root cause: insufficient input sanitization/validation allowing injected script HTML. Affected: WordPress plugin wp-tmkm-amazon (version ≤1.5b). Impact: remote att...
CVE-2013-4598
The CVE-2013-4598 issue affects the Drupal GCC (Groups, Communities and Co) module for Drupal 7.x, specifically versions 7.x-1.x prior to 7.x-1.1. The vulnerability arises because the GCC module does not properly enforce permissions, allowing remote attackers to access configuration pages via uns...
CVE-2012-4598
The CVE-2012-4598 issue affects McAfee Virtual Technician (MVT) ActiveX control (MVTControl) prior to version 6.4 and related ePO-MVT components. The vulnerability arises from an unspecified ActiveX control that can be abused via a crafted web page to execute arbitrary code or cause a denial of s...
CVE-2012-4598
creationtimestamp| type| source ---|---|--- 2012-04-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18805 2012-05-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18812 2018-05-29 15:50:33+00:00| seen|...
McAfee Virtual Technician MVTControl 6.3.0.1911 GetObject Vulnerability
This module exploits a vulnerability found in McAfee Virtual Technician's MVTControl. This ActiveX control can be abused by using the GetObject function to load additional unsafe classes such as WScript.Shell, therefore allowing remote code execution under the context of the user. Module Options...
Fedora Update for asterisk FEDORA-2012-4259
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora Update for asterisk FEDORA-2012-4259
Check for the Version of asterisk OpenVAS Vulnerability Test Fedora Update for asterisk FEDORA-2012-4259 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
CVE-2011-4598
CVE-2011-4598 affects Asterisk Open Source 1.6.2.x (before 1.6.2.21) and 1.8.x (before 1.8.7.2). The handle_request_info function in channels/chan_sip.c can trigger a NULL pointer dereference and daemon crash when automon is enabled, via a crafted sequence of SIP requests, leading to a denial of ...
Ecava IntegraXor web service allows directory traversal outside of web root
Overview Ecava IntegraXor contains a directory traversal vulnerability Description According to Ecava's website: IntegraXor is a suite of tools used to create and run a web-based HMI interface for a Supervisory Control and Data Acquisition SCADA system. Ecava IntegraXor runs a web service that...
ECAVA IntegraXor <= 3.6.4000.0 Directory Traversal Vulnerability - Active Check
ECAVA IntegraXor is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2010-4598
CVE-2010-4598 affects Ecava IntegraXor web-based SCADA UI, with vulnerable versions 3.6.4000.0 and earlier. The issue is a directory traversal in the open request where a crafted file_name parameter with “..” can cause the system to disclose arbitrary files outside the web root. Public records in...
CVE-2009-4598
CVE-2009-4598 describes an SQL injection vulnerability in the JPhoto (com_jphoto) component for Joomla! version 1.0. The flaw allows remote attackers to execute arbitrary SQL commands through the id parameter in a category action to index.php. Documents indicate the vulnerability affects the JPho...
CVE-2008-4598
Technical details for CVE-2008-4598 are not publicly available in the provided documents. Monitor for updates from NVD/Drupal advisories.
CVE-2006-4598
Multiple SQL injection vulnerabilities in links.php in ssLinks 1.22 allow remote attackers to execute arbitrary SQL commands via the 1 go parameter and 2 id parameter in a rate action...
CVE-2006-4598
CVE-2006-4598 affects ssLinks 1.22: SQL injection in links.php via the rate action parameters (1) go and (2) id. Remote attackers can execute arbitrary SQL commands. No remediation details are provided in the supplied documents.
CVE-2005-4598
OoApp Guestbook 2.1 is affected by a cross-site scripting (XSS) vulnerability in home.php, exploitable via the page parameter, enabling remote injection of arbitrary script/HTML. The CVE entry lists a MEDIUM base score (4.3) with network attack vector, no authentication, and partial integrity imp...