126 matches found
CVE-2008-4641
The DoCommand function in jhead.c in Matthias Wandel jhead 2.84 and earlier allows attackers to execute arbitrary commands via shell metacharacters in unspecified input...
CVE-2007-4641
CVE-2007-4641 affects Pakupaku CMS 0.4 and earlier. A directory traversal flaw in index.php allows remote attackers to include and execute arbitrary local files by manipulating the page parameter with .., demonstrated by injecting code into an Apache log file. This enables partial confidentiality...
CVE-2006-4641
CVE-2006-4641 describes an SQL injection in Muratsoft Haber Portal 3.6, targeting the file kategori.asp via the kat parameter. The underlying issue is unsafely constructed SQL from user input, enabling an attacker to execute arbitrary SQL commands remotely. Affected software/component: Muratsoft ...
CVE-2005-4641
CVE-2005-4641 describes an SQL injection in the home.php file of eazyCMS 2.0, exploitable via the page_id parameter. Remote attackers could execute arbitrary SQL commands. The provided documents confirm the affected product/version and the nature of the vulnerability but do not specify a vendor-s...