CVE-2017-4672

CVE-2017-4672 is rejected/not used per the initial description.

CVE-2017-4672

...

CVE-2016-4672

CVE-2016-4672 entry is rejected and not used; it does not represent an active vulnerability.

CVE-2014-4672

CVE-2014-4672 affects Yii PHP Framework 1.1.14: the CDetailView widget’s value property can be exploited to execute arbitrary PHP scripts on the server. Public documents state the issue arises when user input is used to configure the value attribute, enabling remote code execution. A fix was rele...

CVE-2013-4672

Symantec Web Gateway (SWG)

SEC Consult SA-20130726-0 :: Multiple vulnerabilities - Surveillance via Symantec Web Gateway

SEC Consult Vulnerability Lab Security Advisory 20130726-0 ======================================================================= title: Multiple vulnerabilities - Surveillance via Symantec Web Gateway product: Symantec Web Gateway vulnerable version: = 5.1.0. fixed version: 5.1.1 CVE number:...

CVE-2011-4672

CVE-2011-4672 affects Valid tiny-erp

CVE-2010-4672

CVE-2010-4672 affects Cisco ASA 5500 series devices running software 8.2(3) and earlier. The issue allows remote attackers to cause a denial-of-service through EIGRP traffic that triggers an EIGRP multicast storm (block exhaustion). The vulnerability is documented under Bug ID CSCtf20269. Affecte...

CVE-2009-4672

CVE-2009-4672 : A Local File Inclusion vulnerability in WP-Lytebox 1.3 for WordPress is caused by improper filtering of the pg parameter in main.php, enabling remote attackers to include and potentially execute arbitrary local PHP files. Affected product: WP-Lytebox WordPress plugin (version 1.3)...

CVE-2009-4672

creationtimestamp| type| source ---|---|--- 2009-05-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8791...

CVE-2008-4672

CVE-2008-4672 is a cross-site scripting (XSS) flaw in the buymyscripts Lyrics Script, specifically in search_results.php where an attacker can inject arbitrary script/HTML via the k parameter. The connected documents confirm the vulnerable component and parameter, but do not provide concrete deta...

CVE-2008-4672

creationtimestamp| type| source ---|---|--- 2008-09-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32431...

QuickTime PICT image UncompressedQuickTimeData buffer overflow

Added: 11/19/2007 CVE: CVE-2007-4672 BID: 26344 OSVDB: 38547 Background QuickTime is a media player for Windows and Mac OS platforms. Problem A buffer overflow vulnerability in QuickTime allows command execution when a user opens a specially crafted PICT image containing an invalid...

QuickTime PICT image UncompressedQuickTimeData buffer overflow

Added: 11/19/2007 CVE: CVE-2007-4672 BID: 26344 OSVDB: 38547 Background QuickTime is a media player for Windows and Mac OS platforms. Problem A buffer overflow vulnerability in QuickTime allows command execution when a user opens a specially crafted PICT image containing an invalid...

CVE-2007-4672

Apple QuickTime before 7.3 contains a stack-based buffer overflow in processing PICT images due to an invalid UncompressedQuickTimeData opcode length, allowing remote code execution. Public sources (e.g., SAINT advisories and NVD entry) note the vulnerability exists and recommend upgrading to Qui...

QuickTime < 7.3 Multiple Vulnerabilities (Mac OS X)

The version of QuickTime installed on the remote Mac OS X host is older than 7.3. Such versions contain several vulnerabilities that may allow an attacker to execute arbitrary code on the remote host if he can trick the user to open a specially crafted file with QuickTime. C Tenable Network...

CVE-2006-4672

Summary (CVE-2006-4672): A PHP remote file inclusion vulnerability exists in profitCode ppalCart 2.5 EE, potentially part of PayProCart. An attacker can cause arbitrary PHP code execution by supplying a URL in the (1) proMod parameter to index.php, or the (2) docroot parameter to index.php or mai...

CVE-2005-4672

The CVE-2005-4672 entry describes a cross-site scripting (XSS) flaw in CityPost Simple Image-Editor 0.52, specifically in image-editor-52/index.php. The vulnerability allows remote attackers to inject arbitrary web script or HTML via one of five parameters: m1, m2, m3, imgsrc, or m4. The affected...

CVE-2018-4672

CVE-2018-4672 is rejected/not used and does not represent an active vulnerability entry.

CVE-2018-4672

...