65 matches found
CVE-2007-4763
The CVE-2007-4763 issue concerns PHP Object Framework (PHPOF) where PHPOF_INCLUDE_PATH can be controlled to perform a PHP remote file inclusion. Affected are PHPOF versions up to 20040226 and earlier. The underlying problem is a remote attacker-controlled URL inclusion that can allow execution of...
CVE-2006-4763
CVE-2006-4763 affects IBM Lotus Domino Web Access (DWA) 7.0.1, where the LtpaToken is not expired on logout. This can let an attacker intercept the LtpaToken cookie and gain the user’s privileges. Documented impact is that privileges can be obtained by token interception. The provided sources ide...
CVE-2005-4763
CVE-2005-4763 affects BEA WebLogic Server and WebLogic Express (8.1 SP4 and earlier; 7.0 SP6 and earlier; 6.1 SP7 and earlier) where IIOP usage can leak a password in an exception message or logged output, potentially enabling remote attackers to perform unauthorized actions. The vulnerability is...
