51 matches found
CVE-2010-4614
CVE-2010-4614 concerns a SQL injection in item.php of Ero Auktion 2010. The vulnerability is triggered through the id parameter, allowing remote attackers to inject arbitrary SQL commands. This is rooted in how item.php handles the id input, enabling manipulation of the underlying database. The l...
CVE-2010-4614
creationtimestamp| type| source ---|---|--- 2010-12-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15769...
CVE-2009-4614
MoA Gallery 1.2.0 and earlier are affected by multiple PHP remote file inclusion flaws. By supplying a URL in the MOA_PATH parameter to 18 PHP sources (e.g., _error_funcs.php, _template_parser.php, page_sitemap.php, etc.), an attacker can cause arbitrary PHP code execution on affected systems. Th...
CVE-2008-4614
PortalApp 4.0 does not require authentication for 1 forums.asp and 2 content.asp, which allows remote attackers to create and delete forums, topics, and replies...
CVE-2008-4614
CVE-2008-4614 affects PortalApp 4.0. The issue is an authentication flaw in two pages, forums.asp and content.asp, that allows remote attackers to create and delete forums, topics, and replies. Root cause: missing access controls on these pages enabling unauthorized actions. The vulnerability is ...
CVE-2007-4614
BEA WebLogic Server 9.1 does not properly handle propagation of an admin server's security policy change log to temporarily unavailable managed servers, which might allow attackers to bypass intended restrictions, a different vulnerability than CVE-2007-0426...
CVE-2007-4614
CVE-2007-4614 describes BEA WebLogic-related vulnerability where an admin server security policy change log is not properly propagated to temporarily unavailable managed servers, potentially allowing attackers to bypass applied restrictions. The connected records indicate a related entry (CVE-200...
CVE-2005-4614
Multiple SQL injection vulnerabilities in digiSHOP 3.1.17 and earlier allow remote attackers to execute arbitrary SQL commands or obtain the full installation path via (1) the c parameter in cart.php and (2) unspecified search module parameters. Affected: digiSHOP 3.1.17 and earlier. Impact: pote...
