90 matches found
CVE-2010-4749
CVE-2010-4749 concerns BLOG:CMS 4.2.1.e (and possibly earlier) with multiple XSS flaws caused by improper input sanitization. The root causes are (1) the body parameter in action.php and (2) the amount and (3) the action parameters in admin/index.php, allowing remote attackers to inject arbitrary...
CVE-2009-4749
CVE-2009-4749 documents multiple SQL injection flaws in PHP Live! versions 3.2.1 and 3.2.2. Remote attackers can execute arbitrary SQL commands via the x parameter to message_box.php and request.php. Public exploit references exist in the provided sources. The documents do not include remediation...
CVE-2008-4749
Multiple insecure method vulnerabilities in the VImpX.VImpAX ActiveX control VImpX.ocx 4.8.8.0 in DB Software Laboratory VImp X, possibly 4.7.7, allow remote attackers to overwrite arbitrary files via 1 the LogFile property and ClearLogFile method, and 2 the SaveToFile method...
CVE-2008-4749
creationtimestamp| type| source ---|---|--- 2008-10-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6828...
CVE-2007-4749
CVE-2007-4749 affects Autodesk Backburner 3.0.2 where the cmdjob utility allows remote users to queue jobs that execute arbitrary commands on render servers. The Backburner Manager listens by default on TCP port 3234, and the vulnerability arises from command input not being properly restricted, ...
SYMSA-2007-008: Autodesk Backburner 3.0.2 System Backdoor
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Consulting Services www.symantec.com Security Advisory Advisory ID: SYMSA-2007-008 Advisory Title: Autodesk Backburner 3.0.2 : System Backdoor Author: Dave Hartley and Stephen Kapp [email protected] Release Date: 12-09-2007 Application...
CVE-2006-4749
CVE-2006-4749 describes multiple PHP remote file inclusion vulnerabilities in PHP Advanced Transfer Manager (phpATM) 1.20 and earlier. The flaw allows remote attackers to execute arbitrary PHP code via the include_location parameter in files including activate.php, configure.php, fileop.php, geti...
CVE-2005-4749
CVE-2005-4749 describes an HTTP request smuggling vulnerability in BEA WebLogic Server and WebLogic Express. Affected products include WebLogic Server/Express 8.1 SP4 and earlier, 7.0 SP6 and earlier, and 6.1 SP7 and earlier. The flaw allows remote attackers to inject arbitrary HTTP headers via u...
CVE-2005-4749
HTTP request smuggling vulnerability in BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP6 and earlier, and 6.1 SP7 and earlier allows remote attackers to inject arbitrary HTTP headers via unspecified attack vectors...