98 matches found
Oracle Linux 6 / 7 : java-1.7.0-openjdk (ELSA-2015-1229)
The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1229 advisory. 1:1.7.0.85-2.6.1.2.0.1.el71 - Update DISTRONAME in specfile 1:1.7.0.85-2.6.1.2 - Bump upstream tarball to u25b01 to fix issue with 8075374 backport...
RHEL 6 / 7 : java-1.7.0-openjdk (RHSA-2015:1229)
The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:1229 advisory. The java-1.7.0-openjdk packages provide the OpenJDK 7 Java Runtime Environment and the OpenJDK 7 Java Software Development Kit. Multiple...
CVE-2014-4748
CVE-2014-4748 is an XSS vulnerability in the IBM Sametime Classic Meeting Server (8.x up to 8.5.2.1). The issue allows remote attackers to inject arbitrary web script or HTML via a crafted URL, enabling client-side script execution. The NVD entry reports a CVSSv2 base score of 4.3 (MEDIUM) with a...
CVE-2013-4748
SQL injection vulnerability in the News system news extension before 1.3.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2013-4748
The concrete entry is about TYPO3’s News system extension (news) vulnerable to SQL Injection: impacted component is the News extension before version 1.3.3, with remote attackers able to execute arbitrary SQL commands via unspecified vectors. The connected advisories (e.g., GHSA-RG6G-V4XM-G49Q) c...
CVE-2012-4748
creationtimestamp| type| source ---|---|--- 2012-09-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/21005...
CVE-2011-4748
The CVE-2011-4748 entry concerns Parallels Plesk Panel 10.3.1_build1013110726.09, where web pages expose e-mail addresses not meant for deployment correspondence. The issue enables information disclosure by reading the affected pages (e.g., js/ajax/core/ajax.inc.js) and related files. Connected d...
CVE-2010-4748
PmWiki 2.2.20 is affected by a Cross-site Scripting (XSS) vulnerability in pmwiki.php via the from parameter to Main/WikiSandbox. This allows remote attackers to inject arbitrary web script or HTML. The issue is confirmed across multiple sources (NVD/NVD mirror and OpenVAS advisories) and is cate...
CVE-2009-4748
The CVE-2009-4748 entry documents a SQL injection in the WordPress plugin My Category Order (versions
CVE-2009-4748
creationtimestamp| type| source ---|---|--- 2009-07-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9150...
CVE-2008-4748
Format string vulnerability in the URI handler in KVirc 3.4.0, when set as the default application for processing IRC URIs, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via format string specifiers in the irc:// URI...
CVE-2008-4748
KVirc 3.4.0 is affected by a format-string vulnerability in the URI handler when KVirc is set as the default application for processing irc:// URIs. The flaw allows a remote attacker to cause a denial of service (application crash) and potentially execute arbitrary code via format specifiers in t...
CVE-2008-4748
creationtimestamp| type| source ---|---|--- 2008-10-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6832...
CVE-2007-4748
CVE-2007-4748 affects PPStream 2.0.1.3829 via the PowerPlayer.dll ActiveX control. The vulnerability is a buffer overflow triggered by a long Logo parameter, enabling remote arbitrary code execution. Affected component: PowerPlayer.dll ActiveX control; symptom is input handling overflow. Impact p...
CVE-2006-4748
Multiple SQL injection vulnerabilities in F-ART BLOG:CMS 4.1 allow remote attackers to execute arbitrary SQL commands via the 1 xagent, 2 xpath, 3 xreferer, and 4 xdns parameters in a admin/plugins/NPLog.php, and the 5 pitem parameter in b admin/plugins/NPPoll.php; and allow remote authenticated...
CVE-2006-4748
CVE-2006-4748 affects F-ART BLOG:CMS 4.1. Multiple SQL injection vulnerabilities exist in the admin area: parameters (1) xagent, (2) xpath, (3) xreferer, (4) xdns in NP_Log.php; (5) pitem in NP_Poll.php; and (6) pageRef in NP_Referrer.php. These allow remote SQL command execution via the cited pa...
CVE-2005-4748
Technical details about CVE-2005-4748 are not publicly provided in the supplied documents; no concrete vulnerabilities, affected versions, or fixes are described. Monitor for updates.