84 matches found
CVE-2007-4653
CVE-2007-4653 is a SQL injection vulnerability in links.php from the Links MOD (≤1.2.2) used with phpBB ≤2.0.22. The flaw allows remote attackers to modify the start parameter in a search action and execute arbitrary SQL commands. The vulnerability affects the specified combinations (Links MOD ≤1...
CVE-2006-4653
The CVE-2006-4653 entry concerns two WordPress-like poll components, “Amazing Little Poll” and “Amazing Little Picture Poll,” which expose the admin password by serving the lp_settings files (lp_settings.inc or lp_settings.php) from the web root due to insufficient access control. The vulnerabili...
CVE-2005-4653
CVE-2005-4653 affects AL-Caricatier 2.5 and earlier. The vulnerability is in ss.php and allows an unauthenticated attacker to bypass login by a sequence: request view_caricatier.php, then request any file in the admin directory with a cookie_username=admin. Impact: partial confidentiality (per CV...
CVE-2018-4653
This CVE entry is rejected/not used as explicitly stated in the Initial Description.