53 matches found
CVE-2010-4725
Smarty before 3.0.0 RC3 has a vulnerability related to how the asp_tags option is handled in php.ini. The issue is triggered by an on value of asp_tags and is described as having unspecified impact with remote attack vectors, but the connected documents do not provide concrete details on affected...
CVE-2009-4725
CVE-2009-4725 refers to a directory traversal vulnerability in Arab Portal
CVE-2009-4725
Directory traversal vulnerability in modules/aljazeera/admin/setup.php in Arab Portal 2.2 and earlier, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the module parameter...
CVE-2009-4725
creationtimestamp| type| source ---|---|--- 2009-08-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9347...
CVE-2008-4725
Cross-site scripting XSS vulnerability in Opera.dll in Opera 9.52 allows remote attackers to inject arbitrary web script or HTML via the query string, which is not properly escaped before storage in the History Search database aka md.dat, a different vector than CVE-2008-4696. NOTE: some of these...
CVE-2008-4725
CVE-2008-4725 describes a Cross-site scripting (XSS) vulnerability in Opera 9.52 related to History Search where query-string data is not properly escaped before storage in md.dat. The issue allows remote attackers to inject scripts via History Search results. Connected sources confirm Opera 9.52...
CVE-2008-4725
creationtimestamp| type| source ---|---|--- 2008-10-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6801...
Design/Logic Flaw
Adobe ColdFusion 8 and 8.0.1 does not properly implement the public access level for CFC methods, which allows remote attackers to invoke these methods via Flex 2 remoting, a different vulnerability than CVE-2006-4725...
CVE-2007-4725
The CVE-2007-4725 issue affects 7-ZIP32.DLL, a compression/decompression library used by AkkyWareHOUSE’s 7-zip32.dll. The vulnerability is a heap-based buffer overflow triggered by a long filename inside a specially crafted archive, allowing a remote attacker to potentially execute arbitrary code...
CVE-2006-4725
Adobe ColdFusion MX 7 and 7.01 are affected by an issue that allows local users to bypass security restrictions and call components (CFC) within a sandbox from CFML templates located outside the sandbox. Affected product: ColdFusion MX 7/7.01. Underlying cause: sandbox bypass enabling access to C...
CVE-2005-4725
This entry concerns Geeklog prior to version 1.3.11sr3. The vulnerability allows remote attackers to bypass intended access controls and post a comment on an arbitrary story or topic by guessing the story ID. Evidence from connected sources confirms the affected software is Geeklog and the proble...
