53 matches found
Fedora Update for rubygem-json FEDORA-2013-3050
Check for the Version of rubygem-json OpenVAS Vulnerability Test Fedora Update for rubygem-json FEDORA-2013-3050 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
CVE-2010-4627
The CVE-2010-4627 issue affects MyBB (MyBulletinBoard) prior to 1.4.12, where a CSRF in usercp2.php could allow remote attackers to hijack user authentication via unknown vectors. Documented impact is authenticated session hijack; no concrete exploit details are provided in the sources. Acknowled...
CVE-2009-4627
Directory traversal vulnerability in sources/templateparser.php in Moa Gallery 1.2.0 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the pfilename parameter, a different issue than CVE-2009-4614...
CVE-2009-4627
Directory traversal vulnerability in sources/templateparser.php in Moa Gallery 1.2.0 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the pfilename parameter, a different issue than CVE-2009-4614...
CVE-2009-4627
CVE-2009-4627 : Directory traversal in Moa Gallery 1.2.0 and earlier. The issue occurs in sources/_template_parser.php via the p_filename parameter, where a ".." path segment enables reading arbitrary files. This is a targeted file access vulnerability in Moa Gallery, with no remediation details ...
CVE-2008-4627
CVE-2008-4627 describes an SQL injection in the rGallery plugin for WoltLab Burning Board (WBB) version 1.09. The vulnerability allows remote attackers to execute arbitrary SQL commands through the itemID parameter on the RGalleryImageWrapper page (index.php). The CVE entry notes a high risk (CVS...
CVE-2008-4627
creationtimestamp| type| source ---|---|--- 2008-10-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6790...
SuSE 10 Security Update : libpng (ZYPP Patch Number 4627)
Speciall crafted png files could crash applications when attempting to open such a file. CVE-2007-5269 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid29509;...
CVE-2007-4627
CVE-2007-4627 describes an SQL injection in ABC eStore 3.0’s index.php, exploitable via the cat_id parameter to execute arbitrary SQL. Root cause: unsafe SQL construction in index.php. Impact stated as partial confidentiality, integrity, and availability. NVD/metrics cite a CVSS v2 base score 7.5...
CVE-2006-4627
System Information ActiveX control msinfo.dll, when accessed via Microsoft Internet Explorer, allows remote attackers to cause a denial of service crash via a SaveFile function with a long 1 computer and possibly 2 filename and 3 category argument...
CVE-2006-4627
CVE-2006-4627 affects the System Information ActiveX control (msinfo.dll) when accessed via Internet Explorer. The issue allows a remote attacker to cause a denial of service (crash) by calling SaveFile with an excessively long computer and possibly long filename and category arguments. The avail...
CVE-2005-4627
CVE-2005-4627 is a cross-site scripting (XSS) vulnerability described for index.php affecting GmailSite 1.0–1.0.4 and GFHost 0.1.1–0.4.2. The issue allows remote attackers to inject arbitrary web script or HTML via the lng parameter, impacting confidentiality/ integrity of affected sessions as pe...