71 matches found
CVE-2008-4687
CVE-2008-4687 is a post-authentication remote code execution vulnerability in MantisBT where the sort parameter of manage_proj_page.php is unsafely passed to PHP create_function() within core/utility_api.php. Affected software includes MantisBT versions up to 1.1.3; versions 1.1.4 and later are i...
CVE-2008-4687
creationtimestamp| type| source ---|---|--- 2008-10-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6768 2018-05-10 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44611 2018-05-29 15:50:33+00:00| seen|...
CVE-2007-4687
Apple Mac OS X 10.4–10.4.10 contains a symbolic link from /private/tftpboot to the root directory, allowing tftpd users to escape the private directory and access arbitrary files. The issue affects the remote_cmds component and was documented across multiple sources (CVE-2007-4687). Exploitation ...
Mac OS X < 10.4.11 Multiple Vulnerabilities (Security Update 2007-008)
The remote host is running a version of Mac OS X 10.4 which is older than version 10.4.11 or a version of Mac OS X 10.3 which does not have Security Update 2007-008 applied. This update contains several security fixes for the following programs : - Flash Player Plugin - AppleRAID - BIND - bzip2 -...
[Full-disclosure] ZDI-06-041: Microsoft Internet Explorer CSS Float Property Memory Corruption Vulnerability
ZDI-06-041: Microsoft Internet Explorer CSS Float Property Memory Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-041.html November 14, 2006 -- CVE ID: CVE-2006-4687 -- Affected Vendor: Microsoft -- Affected Products: Internet Explorer 6 -- TippingPointTM IPS Customer...
CVE-2006-4687
Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via crafted layout combinations involving DIV tags and HTML CSS float properties that trigger memory corruption, aka "HTML Rendering Memory Corruption Vulnerability."...
CVE-2006-4687
CVE-2006-4687 describes a remote code execution vulnerability in Microsoft Internet Explorer (versions 5.01–6) triggered by crafted HTML layout using DIV tags and CSS float properties, causing memory corruption. Several connected sources (ZDI-06-041, CERT/NVD, and the MS06-067 bulletin) corrobora...
MS06-067: Cumulative Security Update for Internet Explorer (922760)
The remote host is missing the IE cumulative security update 922760. The remote version of IE is vulnerable to several flaws that could allow an attacker to execute arbitrary code on the remote host. Note that Microsoft has re-released this hotfix as its initial version contained a buffer overflo...
CVE-2005-4687
PunBB 1.2.9 (used standalone or with F-ART BLOG:CMS) trusts the client IP from the X-Forwarded-For header instead of the TCP/IP stack, enabling IP address spoofing by remote attackers. Red Hat and CVE records corroborate this vulnerability in PunBB 1.2.9. The underlying issue is header-based IP e...
