60 matches found
CVE-2014-4714
CVE-2014-4714 is rejected/not used and does not represent an active vulnerability entry.
meinestadt.de XSS vulnerability
Vulnerable URL: http://www.meinestadt.de/deutschland/lehrstellen/liste?words=// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4714 VIP website status:| Yes Check meinestadt.de SSL...
CVE-2015-4714
DreamBox DM500-S is vulnerable to a cross-site scripting (XSS) flaw (CVE-2015-4714) in its web interface. The vulnerability arises from unsanitized input in the mode parameter of the /body endpoint, enabling remote attackers to inject arbitrary script/HTML. OpenVAS NASL notes the vulnerability as...
CVE-2015-4714
Cross-site scripting XSS vulnerability in the DreamBox DM500-S allows remote attackers to inject arbitrary web script or HTML via the mode parameter to /body...
XOOPS Module Qas codigo SQL Injection (CVE-2009-4714)
An SQL injection vulnerability has been reported in Alexandre Amaral Xoops Celepar. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
CVE-2013-4714
CVE-2013-4714 is a documented XSS in Tiki Wiki CMS Groupware. Affected versions include 6 LTS prior to 6.13LTS, 9 LTS prior to 9.7LTS, 10.x prior to 10.4, and 11.x prior to 11.1. The underlying issue is an input handling/output rendering weakness that allows remote attackers to inject arbitrary s...
CVE-2012-4714
Rockwell Automation FactoryTalk Services Platform (FTSP) CPR9 through CPR9-SR6 contains an integer overflow in RNADiagnostics.dll that allows remote attackers to cause a DoS by sending UDP datagrams with large integers, potentially crashing RNADiagReceiver.exe. All affected versions should upgrad...
CVE-2011-4714
Directory traversal vulnerability in Virtual Vertex Muster before 6.20 allows remote attackers to read arbitrary files via a .. backslash dot dot in the URL...
CVE-2011-4714
CVE-2011-4714 affects Virtual Vertex Muster Web Interface prior to 6.20. A directory traversal vulnerability allows remote attackers to read arbitrary files via a \... in the URL. The impact is described as a potential confidentiality exposure (read access to files) without details on exploit pat...
CVE-2010-4714
CVE-2010-4714 affects Novell GroupWise prior to 8.02HP, with multiple stack-based buffer overflows that allow remote code execution via an overly long HTTP Host header. Affected components include gwpoa.exe (Post Office Agent), gwmta.exe (Message Transfer Agent), gwia.exe (Internet Agent), WebAcc...
CVE-2009-4714
CVE-2009-4714 affects the XOOPS Celepar quiz module. The vulnerability is a Cross-site Scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via PATH_INFO to cadastro_usuario.php. The available connected sources corroborate an XSS impact, but no explicit remedia...
CVE-2009-4714
creationtimestamp| type| source ---|---|--- 2009-07-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9249...
CVE-2008-4714
CVE-2008-4714 affects Atomic Photo Album 1.1.0 pre4, where improper handling of the apa_cookie_login and apa_cookie_password cookies can allow remote attackers to bypass authentication and gain administrative access by modifying cookies. The vulnerability is documented in multiple sources (NVD en...
CVE-2006-4714
creationtimestamp| type| source ---|---|--- 2008-10-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6789...
CVE-2008-4714
creationtimestamp| type| source ---|---|--- 2008-09-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6580...
CVE-2007-4714
CVE-2007-4714 pertains to a SQL injection vulnerability in Yvora 1.0, specifically in error_view.php where the ID parameter can be manipulated to execute arbitrary SQL commands. The NVD entry documents a network-based, low-complexity flaw with no authentication required, granting partial confiden...
CVE-2006-4714
The CVE-2006-4714 entry describes a PHP remote file inclusion in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) 3.2 and earlier. When register_globals is enabled, an attacker can cause arbitrary PHP code execution via a URL supplied to the classified_path parameter in index.php. Affect...
CVE-2005-4714
CVE-2005-4714 : Concrete details exist in Connected documents. OpenVMPS (VLAN Management Policy Server) up to version 1.3 has a format string vulnerability in the vmps_log function. This allows remote attackers to execute arbitrary code on the affected host (impact described as possible code exec...