53 matches found
CVE-2009-4713
CVE-2009-4713 affects the XOOPS Celepar Qas (Quas) module. It has multiple XSS vulnerabilities in categoria.php (cod_categoria), index.php (opcao), and via PATH_INFO to categoria.php and index.php, enabling remote script/HTML injection. The NVD entry lists a base score of 4.3 (Medium) with AV:N/A...
CVE-2009-4713
creationtimestamp| type| source ---|---|--- 2009-07-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9249...
CVE-2008-4713
CVE-2008-4713 affects 212cafe Board 0.07. The vulnerability is a SQL injection in view.php, exploitable via the qID parameter, allowing remote attackers to execute arbitrary SQL commands. Connected records confirm the issue but do not provide patch/version details or explicit exploit steps. No re...
Titan FTP Server < 6.26 Build 631 SITE WHO Command DoS
Binary data 4713.prm...
CVE-2008-4713
creationtimestamp| type| source ---|---|--- 2008-09-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6578...
Gentoo Security Advisory GLSA 200606-18 (pam_mysql)
The remote host is missing updates announced in advisory GLSA 200606-18. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2007-4713
CVE-2007-4713 describes multiple cross-site scripting (XSS) vulnerabilities in Urchin 5.6.00r2, specifically in urchin.cgi, allowing remote attackers to inject arbitrary web script or HTML via the (1) dtc, (2) vid, (3) n, (4) dt, (5) ed, and (6) bd parameters. The connected documents confirm the ...
CVE-2006-4713
The CVE-2006-4713 entry describes a PHP remote file inclusion in PSYWERKS PUMA 1.0 RC2, specifically in config.php, where an attacker can supply a URL in the fpath parameter to execute arbitrary PHP code on the affected server. The NVD entry lists a CVSS v2 base score of 7.5 (HIGH) with network a...
CVE-2005-4713
CVE-2005-4713 affects PAM-MySQL: a flaw in the pam_mysql_sql_log path (used when PAM-MySQL is integrated with vsftpd) can trigger a segmentation fault, causing remote denial of service. Versions affected are PAM-MySQL 0.6.x before 0.6.2 and 0.7.x before 0.7pre3. The issue is tied to not including...
CVE-2005-4713
Unspecified vulnerability in the SQL logging facility in PAM-MySQL 0.6.x before 0.6.2 and 0.7.x before 0.7pre3 allows remote attackers to cause a denial of service segmentation fault via unspecified vectors, probably involving the pammysqlsqllog function when being used in vsftpd, which does not...
