61 matches found
CVE-2014-4669
HP Enterprise Maps 1.00 is affected by CVE-2014-4669: remote authenticated users can read arbitrary files via an XML External Entity (XXE) in a WSDL document containing an external entity declaration combined with an entity reference in the GetQuote operation. Root cause is an XXE in the XML proc...
CVE-2013-4669
FortiClient and FortiClient Lite proceed with an SSL session after determining that the server’s X.509 certificate is invalid, enabling MITM attackers to obtain sensitive information during password transmission. Affected versions include FortiClient on Windows (<4.3.5.472), Mac OS X (<4.0....
CVE-2012-4669
The CVE-2012-4669 entry concerns M-Link R14.6 (before R14.6v14) and R15.1 (before R15.1v10). The vulnerability arises because the XMPP Server Dialback verification does not verify that a request was made for a Dialback response, enabling remote XMPP servers to spoof domains via responses for doma...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2010-4669. Reason: This candidate is a duplicate of CVE-2010-4669. Notes: All CVE users should reference CVE-2010-4669 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2010-4560
CVE-2010-4560 is a duplicate of CVE-2010-4669 and refers to an ICMPv6 router advertisement flooding DoS affecting IPv6 implementations. The connected records describe remote DoS via flood of ICMPv6 Neighbor Solicitation/Router Advertisement messages impacting Windows 7 and earlier, Cisco/Juniper/...
CVE-2011-4669
The CVE-2011-4669 entry concerns a SQL injection in the WordPress Users plugin (wp-users.php) version 1.3 and potentially earlier. The vulnerability allows remote attackers to inject arbitrary SQL via the uid parameter to index.php, enabling unauthorized database operations. Root cause is imprope...
ICMPv6 Router Announcement flooding denial of service affecting multiple systems
This security advisory is released because Microsoft doesnt want to fix the issue. Cisco did for its IOS and ASA within 3 months. Title: ICMPv6 Router Announcement flooding denial of service affecting multiple systems Date: 05 April 2011 URL:...
CVE-2010-4669
The CVE-2010-4669 entry concerns the IPv6 Neighbor Discovery (ND) router advertisement flood vulnerability. Affected products include the IPv6 stack in Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, and Windows 7. The issue arises when an attacker sends many Router Advertise...
CVE-2008-4669
Cross-site scripting XSS vulnerability in search.php in Dan Fletcher Recipe Script allows remote attackers to inject arbitrary web script or HTML via the keyword parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-4669
CVE-2008-4669 is a Cross‑site Scripting (XSS) vulnerability in search.php of the Dan Fletcher Recipe Script, exploitable via the keyword parameter to inject arbitrary web script/HTML. The NVD entry lists a CVSS v2 base score of 4.3 (Medium) with network attack vector, required user interaction no...
CVE-2008-4669
creationtimestamp| type| source ---|---|--- 2008-09-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32434...
SuSE 10 Security Update : apache2 (ZYPP Patch Number 4669)
Several bugs were fixed in the Apache2 webserver : These include the following security issues : - modstatus: Fix a possible XSS attack against a site with a public server-status page and ExtendedStatus enabled, for browsers which perform charset 'detection'. CVE-2006-5752 - modcache: Prevent a...
CVE-2007-4669
The CVE-2007-4669 issue affects Firebird prior to 2.0.2: the Services API allows remote authenticated users (without SYSDBA) to read the server log (firebird.log) due to CORE-1148. Affected component is the Firebird server stack; vulnerability arises from insufficient access control around log ex...
Remote file inclusion
PHP remote file inclusion vulnerability in install.php in Somery 0.4.6 allows remote attackers to execute arbitrary PHP code via a URL in the skindir parameter, a different vector than CVE-2006-4669. NOTE: the documentation says to remove install.php after installation...
CVE-2006-4669
PHP remote file inclusion vulnerability in admin/system/include.php in Somery 0.4.6 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the skindir parameter...
CVE-2006-4669
The CVE-2006-4669 entry describes a PHP remote file inclusion vulnerability in Somery 0.4.6 and earlier. Specifically, when register_globals is enabled, an attacker can craft a URL to the skindir parameter in admin/system/include.php to execute arbitrary PHP code on the affected system. The vulne...
CVE-2005-4669
The CVE-2005-4669 entry concerns RT Internet Solutions (RTIS) WebAdmin with a SQL injection vulnerability in the login fields (username and password). Affected component is the WebAdmin interface; root cause is improper handling of input in the authentication form, enabling arbitrary SQL executio...
CVE-2018-4669
CVE-2018-4669 is rejected/not used and does not represent an active vulnerability entry.
