174 matches found
CVE-2010-4607
Multiple cross-site scripting XSS vulnerabilities in Habari 0.6.5, when registerglobals is enabled, allow remote attackers to inject arbitrary web script or HTML via the 1 additemform parameter to system/admin/dashadditem.php and the 2 statusdata parameter to system/admin/dashstatus.php. NOTE: so...
CVE-2010-4607
CVE-2010-4607 relates to Habari 0.6.5, where multiple XSS vulnerabilities exist via the vulnerable parameters additem_form (system/admin/dash_additem.php) and status_data[] (system/admin/dash_status.php). The underlying issue is input sanitation that allows injected HTML/script. Exploitation deta...
CVE-2007-4607
creationtimestamp| type| source ---|---|--- 2010-05-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16579 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/oracledcsubmittoexpress.rb 2025-02-06...
CVE-2009-4607
CVE-2009-4607 affects Overland Storage Snap Server 410 with GuardianOS 5.1.041. The CLI runs the less utility with a higher-privileged uid than the invoking user and does not sufficiently restrict shell escapes, enabling a local attacker to gain a privileged shell via the ! escape in less (local ...
Oracle Document Capture 10g ActiveX Control Buffer Overflow
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Oracle Document...
CVE-2009-4607
creationtimestamp| type| source ---|---|--- 2009-10-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9955...
Oracle Document Capture 10g ActiveX Control Buffer Overflow
This module exploits a stack buffer overflow in Oracle Document Capture 10g 10.1.3.5.0. Oracle Document Capture 10g comes bundled with a third party ActiveX control emsmtp.dll 6.0.1.0. When passing an overly long string to the method "SubmitToExpress" an attacker may be able to execute arbitrary...
CVE-2006-4607
creationtimestamp| type| source ---|---|--- 2009-04-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8425...
CVE-2007-4607
Buffer overflow in the EasyMailSMTPObj ActiveX control in emsmtp.dll 6.0.1 in the Quiksoft EasyMail SMTP Object, as used in Postcast Server Pro 3.0.61 and other products, allows remote attackers to execute arbitrary code via a long argument to the SubmitToExpress method, a different vulnerability...
CVE-2006-4607
CVE-2006-4607 affects Longino Jacome php-Revista 1.1.2. The vulnerability is in admin/index.php, where remote attackers can bypass authentication by setting ID_ADMIN and SUPER_ADMIN to 1. The NVD entry documents an authentication bypass with this parameter manipulation. No explicit remediation is...
CVE-2005-4607
CVE-2005-4607 describes a cross-site scripting (XSS) vulnerability in BugPort’s index.php for version 1.147 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via the following parameters: ids[0], action, report_id, devWherePair[1][1], and binds[0]. The connecte...
CVE-2005-4607
Cross-site scripting XSS vulnerability in index.php in BugPort 1.147 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 ids0, 2 action, 3 reportid, 4 devWherePair11, and 5 binds0 parameters...
