76 matches found
CVE-2013-4785
Dell iDRAC6 firmware
DDIVRT-2011-37 HP JetDirect Device Page Directory Traversal (CVE-2011-4785)
Title: DDIVRT-2011-37 HP JetDirect Device Page Directory Traversal CVE-2011-4785 Severity: High Date Discovered: 2011-10-12 Discovered By: Digital Defense, Inc. Vulnerability Research Team Credited To: sxkeebler and r@b13$ Vulnerability Description: The HP-ChaiSOE/1.0 embedded web server on certa...
[security bulletin] HPSBPI02733 SSRT100646 rev.1 - Certain HP LaserJet Printers, Remote Unauthorized Access to Files
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03140700 Version: 1 HPSBPI02733 SSRT100646 rev.1 - Certain HP LaserJet Printers, Remote Unauthorized Access to Files NOTICE: The information in this Security Bulletin should be acted upon as soon...
CVE-2010-4785
The vulnerability CVE-2010-4785 affects IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.62 (6.0.0.8-TIV-ITDS-IF0004). The do_extendedOp function in ibmslapd on Linux, Solaris, and Windows allows remote authenticated users to cause a denial of service (ABEND) via a malformed LDAP extended opera...
CVE-2009-4785
The CVE-2009-4785 entry concerns a SQL injection vulnerability in the Joomla! Quick News (com_quicknews) component. The flaw allows remote attackers to inject arbitrary SQL commands through the newsid parameter in the view_item action to index.php. Multiple connected sources (Red Hat advisory, NV...
CVE-2009-4785
creationtimestamp| type| source ---|---|--- 2009-11-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10252...
CVE-2008-4785
SQL injection vulnerability in newuser.php in the alternateprofiles plugin, possibly 0.2, for e107 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-4785
CVE-2008-4785 affects the e107 CMS, specifically the alternate_profiles plugin’s newuser.php. The vulnerability is a SQL injection via the id parameter, allowing remote attackers to execute arbitrary SQL commands. Reported across multiple sources (NVD entries, OpenVAS, advisories) with a CVSS v2 ...
CVE-2007-4785
CVE-2007-4785 concerns Sony Micro Vault Fingerprint Access Software shipped with Sony Micro Vault USM-F USB drives. The vulnerability arises from a driver that hides a directory under %WINDIR%, which could allow a remote attacker to bypass malware detection by placing files in that hidden directo...
CVE-2006-4896
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2006-4785. Reason: This candidate is a duplicate of CVE-2006-4785. Notes: All CVE users should reference CVE-2006-4785 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2006-4896
This CVE-2006-4896 entry is rejected and should not be used as an active vulnerability reference.
Moodle < 1.6.2 Multiple Vulnerabilities
The installed version of Moodle fails to sanitize user-supplied input to a number of parameters and scripts. An attacker can leverage these issues to launch SQL injection and cross-site scripting attacks against the affected application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
CVE-2006-4785
SQL injection vulnerability in blog/edit.php in Moodle 1.6.1 and earlier allows remote attackers to execute arbitrary SQL commands via the format parameter as stored in the $blogEntry variable, which is not properly handled by the insertrecord function, which calls adodbcolumnsql in the adodb lay...
CVE-2006-4785
Moodle
CVE-2005-4785
CVE-2005-4785 describes a Cross-site scripting (XSS) vulnerability in QuickBlogger 1.4 and earlier. The flaw allows remote attackers to inject arbitrary web script or HTML via the (1) author field and (2) the comment section. The documented impact includes partial integrity compromise of affected...