56 matches found
CVE-2011-4783
CVE-2011-4783 affects IDA Pro’s IDAPython plugin up to version 1.5.2.3. A crafted IDB file can trigger arbitrary code execution due to improper handling of swig_runtime_data in the current working directory, with an attacker leveraging user-assisted remote access. The vulnerability enables code e...
Vulnerability in Hex-Rays IDA Pro, IDAPython Plugin Could Allow Arbitrary Script Execution
Executive Summary Microsoft is providing notification of the discovery and remediation of a vulnerability affecting IDA Pro running the IDAPython plugin. By default, the IDAPython plugin is installed with all versions of IDA Pro. Microsoft discovered and disclosed the vulnerability under...
CVE-2010-4783
The CVE-2010-4783 entry concerns multiple cross-site scripting (XSS) vulnerabilities in index.php of PHP Web Scripts Easy Banner Free 2009.05.18. The root cause described in sources is that with magic_quotes_gpc disabled, an attacker can inject arbitrary web script or HTML via the siteurl and url...
CVE-2010-4783
creationtimestamp| type| source ---|---|--- 2010-11-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35017...
CVE-2009-4783
The CVE-2009-4783 item concerns multiple SQL injection vulnerabilities in Theeta CMS (version unclear). The affected entry points are the start parameter in three PHP scripts: community/forum.php, community/thread.php, and blog/index.php, where user-supplied input may be concatenated into SQL que...
CVE-2009-4783
creationtimestamp| type| source ---|---|--- 2009-12-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10290...
CVE-2008-4783
The CVE-2008-4783 entry concerns tlAds 1.0, where an authentication bypass enables remote attackers to gain administrative access by setting the tlAds_login cookie to "admin". The vulnerability is triggered by manipulating a session cookie, leading to elevated privileges without any user interact...
CVE-2008-4783
creationtimestamp| type| source ---|---|--- 2008-10-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6848...
Gentoo Security Advisory GLSA 200710-02 (php)
The remote host is missing updates announced in advisory GLSA 200710-02. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
rPSA-2007-0242-1 php5 php5-cgi php5-mysql php5-pear php5-pgsql php5-soap php5-xsl
rPath Security Advisory: 2007-0242-1 Published: 2007-11-19 Products: rPath Appliance Platform Linux Service 1 rPath Linux 1 Rating: Minor Exposure Level Classification: Remote Deterministic Denial of Service Updated Versions: php5=conary.rpath.com@rpl:1/5.2.5-1-1...
CVE-2007-4783
CVE-2007-4783 : The iconv_substr vulnerability affects PHP 5.2.4 and earlier, allowing context-dependent attackers to cause a denial of service (application crash via a long string in charset) or, with a long str parameter, a denial of service (temporary hang). The note indicates this might not e...
CVE-2006-4783
SQL injection vulnerability in squads.php in WebSPELL 4.01.01 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary SQL commands via the squadID parameter...
CVE-2006-4783
WebSPELL 4.01.01 and earlier are affected by an SQL injection in squads.php when register_globals is enabled. The vulnerability allows remote attackers to inject arbitrary SQL via the squadID parameter, enabling unauthorized database commands. The available sources confirm the affected file and p...
CVE-2005-4783
CVE-2005-4783 concerns NetBSD kernels where kernfs_xread in kernfs_vnops.c fails to check for a negative offset when reading the message buffer. This lack of validation allows local users to read arbitrary kernel memory. The description specifies impact as a local information disclosure, affectin...
