70 matches found
CVE-2009-4634
Multiple integer underflows in FFmpeg 0.5 allow remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted file that 1 bypasses a validation check in vorbisdec.c and triggers a wraparound of the stack pointer, or 2 access a pointer from out-of-bounds memory in...
CVE-2008-4634
Cross-site scripting XSS vulnerability in Movable Type 4 through 4.21 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to the administrative page, a different vulnerability than CVE-2008-4079...
CVE-2008-4634
Movable Type contains a cross-site scripting (XSS) vulnerability in MT 4.x (through 4.21, per initial CVE) and related Enterprise/Community variants, arising from improper handling of the administrative page. Exploitation may allow arbitrary script execution in the administrator’s browser. JVN en...
CVE-2007-4634
CVE-2007-4634 affects Cisco CallManager and Unified Communications Manager (CUCM). The vulnerability is a SQL injection in the lang parameter on the (1) user and (2) admin logon pages (aka CSCsi64265). Affected versions include CUCM before 3.3(5)sr2b, 4.1 before 4.1(3)sr5, 4.2 before 4.2(3)sr2, a...
CVE-2006-4634
Cross-site scripting XSS vulnerability in index.php in VBZooM allows remote attackers to inject arbitrary web script or HTML via the UserID parameter, a different vector than CVE-2006-1133 and CVE-2005-2441...
CVE-2006-4634
Cross-site scripting XSS vulnerability in index.php in VBZooM allows remote attackers to inject arbitrary web script or HTML via the UserID parameter, a different vector than CVE-2006-1133 and CVE-2005-2441...
CVE-2006-4634
CVE-2006-4634: XSS in VBZooM’s index.php via the UserID parameter. Affected: VBZooM (Web app); vulnerable component: index.php. Root cause: improper handling of user-supplied UserID enabling injection of script/HTML. Documentation confirms vulnerability description; no concrete remediation or pat...
CVE-2005-4634
CVE-2005-4634 describes an SQL injection in index.php of ActiveCampaign SupportTrio 1.4, exploitable via the page parameter. The vulnerability is documented with a high impact score (CVSS v2 base 7.5) and network access with no authentication required, causing potential unauthorized database comm...
