121 matches found
CVE-2015-4741
CVE-2015-4741 affects Oracle E-Business Suite 12.2.4 (Oracle Applications Framework component). It allows remote authenticated users to affect integrity via unknown vectors related to Dialog popup. CVSSv2 base score 3.5 (LOW). Exploitation details and a specific fix are not elaborated in the prov...
MOXA Device Manager Tool SCADA Buffer Overflow (CVE-2010-4741)
A remote code execution vulnerability has been reported in MOXA Device Manager Tool. The vulnerability is due to a stack based buffer overflow when handling specially crafted packets...
CVE-2014-4741
CVE-2014-4741 describes an SQL injection vulnerability in Artifectx xClassified 1.2, specifically affecting the demo/ads.php component, where the catid parameter can be exploited by remote attackers to execute arbitrary SQL commands. The NVD entry assigns a CVSS v2 base score of 7.5 (HIGH) with n...
CVE-2014-4741
creationtimestamp| type| source ---|---|--- 2014-07-07 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39239...
CVE-2012-4741
CVE-2012-4741 affects the RADIUS extension in PacketFence prior to v3.3.0. The authentication username differs from the one used for authentication for users with custom VLAN assignment extensions, allowing remote attackers to spoof user identities via the User-Name RADIUS attribute. Impact is li...
CVE-2011-4741
The CVE-2011-4741 entry pertains to Parallels Plesk Panel 10.2.0 build 20110407.20. The Control Panel includes a database connection string within a web page, which allows remote attackers to obtain potentially sensitive information by reading the page at client@2/domain@1/hosting/aspdotnet/. The...
CVE-2010-4741
CVE-2010-4741 affects MOXA Device Manager Tool (MDM Tool) MDM Tool before 2.3. It is a stack-based overflow in MDMUtil.dll of MDMTool.exe that enables remote code execution via crafted data in a session on TCP port 54321. Public references corroborate the vulnerability; exploitation is evidenced ...
CVE-2010-4741
creationtimestamp| type| source ---|---|--- 2010-11-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16381 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/scada/moxamdmtool.rb 2025-02-06 03:13:40+00:00| seen|...
MOXA Device Manager Tool 2.1 - Remote Buffer Overflow (Metasploit)
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'MOXA Device Manager Tool 2.1 Buffer Overflow', 'Description' = %q This module exploits a stack buffer overflow in MOXA MDM Tool 2.1. When sending ...
MOXA Device Manager Tool 2.1 Buffer Overflow
This module exploits a stack buffer overflow in MOXA MDM Tool 2.1. When sending a specially crafted MDMGw MDM2Gateway response, an attacker may be able to execute arbitrary code. Module Options msf use exploit/windows/scada/moxa/mdmtool msf undefinedmdmtool show actions ...actions... msf...
MOXA Device Manager Tool 2.1 - Buffer Overflow (Metasploit)
MOXA Device Manager Tool 2.1 - Buffer Overflow Metasploit. CVE-2010-4741. Local exploit for Windows platform This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'MOXA Device Manager Tool 2.1 Buffer...
CVE-2009-4741
CVE-2009-4741 affects Skype on Windows via the Skype Extras Manager prior to version 2.0.0.67, within Skype before 4.1.0.179. The vulnerability is described as unspecified with unknown impact and attack vectors; no concrete root cause, exploit details, or affected configurations beyond this conte...
System Requirements Lab Software Client Detection
Binary data 4741.prm...
CVE-2008-4741
CVE-2008-4741 affects FAR-PHP 1.00 and is a directory traversal vulnerability in index.php. When magic_quotes_gpc is disabled, remote attackers can read arbitrary files by supplying a "." (dot dot) sequence in the c parameter. This is documented in NVD with a CVSS v2 base score of 5.0 (Medium) an...
CVE-2008-4741
creationtimestamp| type| source ---|---|--- 2008-08-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32287...
CVE-2007-4741
CVE-2007-4741 affects Claroline prior to 1.8.6. The page admin/adminusers.php is vulnerable to cross-site scripting (XSS) via the sort parameter, allowing remote authenticated administrators to inject arbitrary web script or HTML. The vulnerability is triggered by manipulating the sort field and ...
CVE-2006-4741
CVE-2006-4741 describes a PHP remote file inclusion vulnerability in bits_listings.php of IDevSpot PhpLinkExchange 1.0. The flaw allows remote attackers to execute arbitrary code via the svr_rootPhpStart parameter. Affected product: IDevSpot PhpLinkExchange 1.0 (bits_listings.php). Root cause: im...
CVE-2005-4741
NetBSD 1.6, NetBSD 2.0 through 2.1, and NetBSD-current before 20051031 allows local users to gain privileges by attaching a debugger to a setuid/setgid PSUGID process that performs an exec without a reset of real credentials...
CVE-2005-4741
NetBSD is affected: versions 1.6, 2.0–2.1, and NetBSD-current before 20051031. The issue is a local privilege escalation: a debugger can attach to a setuid/setgid (P_SUGID) process that performs an exec without resetting real credentials. Root cause: lack of credential reset on exec for P_SUGID p...