57 matches found
CVE-2013-4745
CVE-2013-4745 is a SQL injection vulnerability in the TYPO3 extension myquizpoll prior to version 2.0.6, enabling remote attackers to execute arbitrary SQL commands via unspecified vectors. The issue affects the myquizpoll component for TYPO3 and is documented across multiple feeds (NVD, Red Hat,...
CVE-2013-4745
SQL injection vulnerability in the My quiz and poll myquizpoll extension before 2.0.6 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2012-4745
CVE-2012-4745 is an XSS vulnerability in Acuity CMS 2.6.2, exploitable via the UserName parameter in admin/login.asp. The NVD CVSS 2.0 base score is 4.3 (MEDIUM) with network access, no authentication, and client-side impact to integrity (partial) but no confidentiality/availability impact. Affec...
CVE-2012-4745
creationtimestamp| type| source ---|---|--- 2012-04-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37091...
CVE-2011-4745
CVE-2011-4745: Multiple XSS vulnerabilities in the Parallels Plesk Panel billing system (10.3.1_build1013110726.09). The issue stems from inadequate input sanitization in a PHP script (e.g., admin/index.php/default), enabling remote attackers to inject arbitrary JavaScript/HTML. Exploitation stat...
CVE-2010-4745
CVE-2010-4745 is an XSS vulnerability in PHPXref (nav.html) prior to version 0.7.1, where an attacker could inject script/HTML via the query string. Affected component: PHPXref navigation page; root cause: lack of input sanitization on query parameters. Impact stated: cross-site scripting; no exp...
CVE-2009-4745
creationtimestamp| type| source ---|---|--- 2009-10-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10006 2009-10-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33282...
CVE-2008-4745
CVE-2008-4745 is an XSS vulnerability in Uniwin eCart Professional 2.0.17, specifically in emailFriend.asp. Remote attackers can inject arbitrary web script or HTML via unspecified vectors. The NVD entry lists a base score of 4.3 (Medium) with Network attack vector, Medium complexity, no authenti...
Debian: Security Advisory (DSA-1145-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 1145-1 (freeradius)
The remote host is missing an update to freeradius announced via advisory DSA 1145-1. Several remote vulnerabilities have been discovered in freeradius, a high-performance RADIUS server, which may lead to SQL injection or denial of service. The Common Vulnerabilities and Exposures project...
CVE-2006-4745
The CVE-2006-4745 entry concerns ScaryBear PocketExpense Pro 3.9.1, where an internally recorded key protects a data file whose contents are stored in plaintext. The underlying issue allows local users to bypass authentication and access the file by modifying a value in the file header. This is a...
DSA-1145-1 freeradius - several
Bulletin has no description...
[SECURITY] [DSA 1145-1] New freeradius packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 1145-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 8th, 2006 http://www.debian.org/security/faq -...
CVE-2005-4745
CVE-2005-4745 is a SQL injection vulnerability in the rlm_sqlcounter module of FreeRADIUS 1.0.3 and 1.0.4. The issue permits remote attackers to execute arbitrary SQL commands via unknown attack vectors. Documentation in multiple advisories (e.g., Debian DSA-1145-1) corroborates the SQL injection...
CVE-2005-4745
SQL injection vulnerability in the rlmsqlcounter module in FreeRADIUS 1.0.3 and 1.0.4 allows remote attackers to execute arbitrary SQL commands via unknown attack vectors...
