71 matches found
CVE-2009-4705
CVE-2009-4705 is an XSS vulnerability in the TYPO3 Twitter Search (twittersearch) extension for TYPO3, affecting versions before 0.1.1. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. No exploitation details are provided in the connected documents...
CVE-2008-4705
SQL injection vulnerability in successstory.php in php Online Dating Software MyPHPDating allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-4705
CVE-2008-4705 describes an SQL injection vulnerability in the file success_story.php of the php Online Dating Software MyPHPDating. The vulnerability allows remote attackers to execute arbitrary SQL commands through the id parameter, enabling potential data disclosure or modification depending on...
CVE-2008-4705
creationtimestamp| type| source ---|---|--- 2008-10-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6754...
Trend Micro OfficeScan < 7.3 Build 3172 Client Traversal Arbitrary File Access
Binary data 4705.prm...
CVE-2006-4705
SQL injection vulnerability in login.php in dwayner79 and Dominic Gamble Timesheet aka Timesheet.php 1.2.1 allows remote attackers to execute arbitrary SQL commands via the username parameter...
CVE-2006-4705
SQL injection vulnerability in login.php of Timesheet (aka Timesheet.php) 1.2.1 allows remote attackers to execute arbitrary SQL commands via the username parameter. This affects Timesheet 1.2.1 as reported by CVE records. The connected documents specify the vulnerability and payload vector but d...
CVE-2005-4705
BEA WebLogic Server/Express insecure connection handling: when a Java client opens an SSL connection after an insecure one, the SSL session may be downgraded and the connection can be sniffed. Affected: WebLogic Server/Express 6.1 SP7, 7.0 SP6, 8.1 SP4 and earlier. Root cause described as returni...