65 matches found
CVE-2016-4719
The GeoServices component in Apple iOS before 10 and watchOS before 3 does not properly restrict access to PlaceData information, which allows attackers to discover physical locations via a crafted application...
CVE-2016-4719
The CVE-2016-4719 entry affects Apple’s GeoServices component in iOS (pre-10) and watchOS (pre-3). The issue is a permissions/configuration flaw in PlaceData that allows an app to read sensitive location information. Apple’s security notes enumerate GeoServices/CVE-2016-4719 under watchOS 3 and i...
Fedora Update for libxml2 FEDORA-2015-4719
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Joomla Component com_jradio Local File Inclusion (CVE-2010-4719)
A file inclusion vulnerability has been reported in Joomla Com Jradio. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
CVE-2014-4719
User-Friendly SVN (USVN) is affected by an XSS in the login panel (svn/login/) prior to version 1.0.7, allowing an attacker to inject arbitrary script via the username field. The vulnerability is documented in CVE-2014-4719 with a base CVSS2 score of 4.3 (I=P). Affected component is the login han...
CVE-2014-4719
Cross-site scripting XSS vulnerability in the login panel svn/login/ in User-Friendly SVN aka USVN before 1.0.7 allows remote attackers to inject arbitrary web script or HTML via the username field...
CVE-2013-4719
SQL injection vulnerability in the SEO Pack for ttnews extension before 1.3.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2013-4719
CVE-2013-4719 is a SQL injection vulnerability in the TYPO3 SEO Pack’s tt_news extension, affecting versions prior to 1.3.3. The weakness allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Affected software is the TYPO3 SEO Pack for tt_news; the exact root cause de...
CVE-2011-4719
Mode C: CVE-2011-4719 concerns Google Chrome before 16.0.912.63 on Acer AC700, Samsung Series 5, and Cr-48 Chromebook platforms. The connected documents provide concrete details: affected product is Google Chrome browser; affected versions are before 16.0.912.63. The root cause and impact are des...
CVE-2010-4719
Joomla! component JRadio (com_jradio) contains a Local File Inclusion (LFI) in versions before 1.5.1. The vulnerability allows remote attackers to read arbitrary files via directory traversal sequences in the index.php controller parameter. The issue arises from a directory traversal flaw in the ...
CVE-2010-4719
creationtimestamp| type| source ---|---|--- 2010-12-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15749...
CVE-2009-4719
The OpenVAS/NVD entries confirm a SQL injection vulnerability (CVE-2009-4719) in Discloser 0.0.4 rc2: index.php is vulnerable to exploitation via the more parameter, allowing remote attackers to execute arbitrary SQL commands. Impact per the sources: partial confidentiality/integrity/availability...
CVE-2009-4719
creationtimestamp| type| source ---|---|--- 2009-08-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9349...
CVE-2008-4719
OpenEngine 2.0 beta2 contains a PHP remote file inclusion flaw in cms/classes/openengine/filepool.php when register_globals is enabled. An attacker can cause arbitrary PHP code execution by supplying a URL in the oe_classpath parameter, a different vector than CVE-2008-4329. The vulnerability is ...
CVE-2008-4719
creationtimestamp| type| source ---|---|--- 2008-09-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6585...
CVE-2007-4719
CVE-2007-4719 describes a SQL injection in read.php of 212cafeBoard 6.30 Beta, exploitable via the id parameter to execute arbitrary SQL commands remotely. Affected component: read.php within 212cafeBoard 6.30 Beta. Root cause: unsafely concatenated input in SQL query exposes database to injectio...
CVE-2006-4719
Multiple PHP remote file inclusion vulnerabilities in MyABraCaDaWeb 1.0.3, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the base parameter to 1 index.php or 2 pop.php...
CVE-2006-4719
CVE-2006-4719 describes multiple PHP remote file inclusion vulnerabilities in MyABraCaDaWeb 1.0.3. When register_globals is enabled, an attacker can supply a URL via the base parameter to index.php or pop.php to execute arbitrary PHP code on the affected system. The documented impact is arbitrary...