151 matches found
CVE-2009-4692
CVE-2009-4692 describes a Cross-site Scripting (XSS) vulnerability in RadScripts RadLance Gold 7.5, specifically in index.php where the pr parameter in a ulist action can be exploited to inject arbitrary script or HTML. The vulnerability is tied to a flaw in how user-supplied data is handled in t...
CVE-2009-4692
creationtimestamp| type| source ---|---|--- 2009-07-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9195...
CVE-2008-4692
CVE-2008-4692 affects IBM DB2’s Native Managed Provider for .NET. When a definer cannot maintain objects, it preserves views and triggers without marking them inoperative or dropping them, giving an unknown impact. Remediation is provided via fixes: IBM DB2 9.1 FP6 and DB2 9.5 FP2 (and related pa...
CVE-2007-4692
The CVE-2007-4692 issue affects Apple Safari 3 (pre-Beta Update 3.0.4) on Windows and Mac OS X 10.4–10.4.10. The vulnerability arises in the tabbed browsing feature, allowing remote attackers to spoof HTTP authentication for other sites by displaying an authentication sheet for a non-active tab, ...
Mac OS X < 10.4.11 Multiple Vulnerabilities (Security Update 2007-008)
The remote host is running a version of Mac OS X 10.4 which is older than version 10.4.11 or a version of Mac OS X 10.3 which does not have Security Update 2007-008 applied. This update contains several security fixes for the following programs : - Flash Player Plugin - AppleRAID - BIND - bzip2 -...
Secunia Research: Microsoft Windows Object Packager Dialog Spoofing
====================================================================== Secunia Research 11/10/2006 - Microsoft Windows Object Packager Dialog Spoofing - ====================================================================== Table of Contents Affected...
CVE-2006-4692
Argument injection vulnerability in the Windows Object Packager packager.exe in Microsoft Windows XP SP1 and SP2 and Server 2003 SP1 and earlier allows remote user-assisted attackers to execute arbitrary commands via a crafted file with a "/" slash character in the filename of the Command Line...
CVE-2006-4692
CVE-2006-4692 describes an Argument injection in Windows Object Packager (packager.exe) that could allow remote code execution. The vulnerability exists in Windows XP (SP1/SP2) and Windows Server 2003 (SP1 and earlier) due to improper handling of the Command Line property when a slash (/) is incl...
