55 matches found
CVE-2010-4784
CVE-2010-4784 describes multiple SQL injection vulnerabilities in the member.php component of PHP Web Scripts Easy Banner Free 2009.05.18. When magic_quotes_gpc is disabled, remote attackers may inject SQL via the (1) username and (2) password parameters. Details on exploitation, affected version...
CVE-2010-4784
Multiple SQL injection vulnerabilities in member.php in PHP Web Scripts Easy Banner Free 2009.05.18, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters...
CVE-2010-4784
creationtimestamp| type| source ---|---|--- 2010-11-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35016...
CVE-2009-4784
SQL injection vulnerability in the Joaktree comjoaktree component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the treeId parameter to index.php...
CVE-2009-4784
CVE-2009-4784: SQL injection in Joaktree (com_joaktree) component v1.0 for Joomla! allows remote attackers to execute arbitrary SQL via the treeId parameter to index.php. The vulnerability description is consistent across sources (NVD/Red Hat/NVD mirror, CVE records). Affected software: Joomla! e...
CVE-2009-4784
creationtimestamp| type| source ---|---|--- 2009-12-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10272...
SuSE Update for php4, php5 SUSE-SA:2008:004
Check for the Version of php4, php5 OpenVAS Vulnerability Test $Id: gbsuse2008004.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for php4, php5 SUSE-SA:2008:004 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free...
CVE-2008-4784
CVE-2008-4784 affects aflog 1.01. A cookie-based flaw allows remote attackers to bypass authentication and obtain administrative access by setting aflog_auth_a to “A” or “O” in edit_delete.php, edit_cat.php, edit_lock.php, and edit_form.php. The issue is represented in multiple sources (NVD, Open...
CVE-2008-4784
creationtimestamp| type| source ---|---|--- 2008-10-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6818...
Gentoo Security Advisory GLSA 200710-02 (php)
The remote host is missing updates announced in advisory GLSA 200710-02. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
openSUSE 10 Security Update : apache2-mod_php5 (apache2-mod_php5-4909)
This update fixes multiple bugs in php by upgrading it to version 5.2.5. - Flaws in processing multi byte sequences in htmlentities/htmlspecialchars CVE-2007-5898 - overly long arguments to the dl function could crash php CVE-2007-4825 - overy long arguments to the glob function could crash php...
CVE-2007-4784
The CVE-2007-4784 issue affects PHP prior to 5.2.4, where setlocale with a very long locale string can trigger a denial of service (application crash). The description notes that this is a context-dependent DoS and may not be exploitable to code execution in multi-threaded web server environments...
Moodle < 1.6.2 Multiple Vulnerabilities
The installed version of Moodle fails to sanitize user-supplied input to a number of parameters and scripts. An attacker can leverage these issues to launch SQL injection and cross-site scripting attacks against the affected application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
CVE-2005-4784
CVE-2005-4784 involves multiple buffer overflows in the POSIX readdir_r function. The root cause is a race condition between opendir and pathconf, enabling a symlink attack that can move the filesystem to a state with a longer maximum directory-entry name length, or programmer-introduced errors o...