69 matches found
CVE-2009-4757
CVE-2009-4757 affects BrotherSoft EW-MusicPlayer 0.8. It describes a stack-based buffer overflow triggered by a long string in a malformed playlist (.m3u), allowing remote attackers to cause a denial of service or possibly execute arbitrary code. The description notes that some details come from ...
CVE-2008-4757
creationtimestamp| type| source ---|---|--- 2008-10-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6833...
SuSE 10 Security Update : MozillaFirefox (ZYPP Patch Number 4757)
This update brings Mozilla Firefox to security update version 2.0.0.10 Following security problems were fixed: MFSA 2007-37 / CVE-2007-5947: The jar protocol handler in Mozilla Firefox retrieves the inner URL regardless of its MIME type, and considers HTML documents within a jar archive to have t...
Immunity Canvas: PHPMYTOURNEY_INCLUDE
Name| phpmytourneyinclude ---|--- CVE| CVE-2007-4757 Exploit Pack| CANVAS Description| phpMytourney Remote file inclusion Notes| CVSS: 7.5 Repeatability: Infinite VENDOR: vanta.ru CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4757 CVE Name: CVE-2007-4757...
CVE-2007-4757
The vulnerability CVE-2007-4757 affects phpMytourney: a PHP remote file inclusion in menu.php allows an attacker to execute arbitrary PHP code by supplying a URL in the functions_file parameter. This is a server-side code execution risk (base CVSS 7.5, HIGH). Affected component is the menu.php in...
CVE-2007-4757
PHP remote file inclusion vulnerability in menu.php in phpMytourney allows remote attackers to execute arbitrary PHP code via a URL in the functionsfile parameter...
CVE-2006-4757
CVE-2006-4757 affects the e107 CMS version 0.7.5. The vulnerability is described as multiple SQL injection flaws in the admin section, enabling remote authenticated administrative users to execute arbitrary SQL commands via the following parameters: (1) linkopentype, (2) linkrender, (3) link_clas...
CVE-2005-4757
BEA WebLogic Server and WebLogic Express 8.1 SP3 and earlier, and 7.0 SP5 and earlier, are affected by an issue where the servlet root URL pattern (/) is not properly constrained, potentially allowing remote attackers to bypass intended protections. The vulnerability is described across multiple ...