172 matches found
CVE-2010-4786
CVE-2010-4786 affects IBM Tivoli Directory Server (TDS) 6.0 prior to 6.0.0.63 (6.0.0.8‑TIV‑ITDS‑IF0005). The issue enables a remote authenticated user to cause a denial of service (daemon crash or hang) by performing a paged search, related to an improper ibm-slapdIdleTimeOut configuration. The d...
CVE-2009-4786
Pligg before version 1.0.3 is vulnerable to multiple cross-site scripting (XSS) flaws via the HTTP Referer header in eight endpoints (admin_config.php, admin_modules.php, delete.php, editlink.php, submit.php, submit_groups.php, user_add_remove_links.php, user_settings.php). The issue allows remot...
Pligg Cross Site Scripting And Request Forgery Remote Vulnerabilities
Pligg is prone to multiple cross-site scripting vulnerabilities and a cross-site request-forgery vulnerability. An attacker can exploit these issues to steal cookie-based authentication credentials or perform unauthorized actions when masquerading as the victim. Other attacks are also possible...
CVE-2008-4786
CVE-2008-4786 describes an SQL injection vulnerability in the EasyShop plugin for e107, specifically in easyshop.php where the category_id parameter can be exploited to execute arbitrary SQL commands. The vulnerability affects the EasyShop component within e107 and is categorized with a CVSSv2 ba...
CVE-2008-4786
SQL injection vulnerability in easyshop.php in the EasyShop plugin for e107 allows remote attackers to execute arbitrary SQL commands via the categoryid parameter...
CVE-2008-4786
creationtimestamp| type| source ---|---|--- 2008-10-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6852...
CVE-2007-4786
Cisco ASA/PIX: The vulnerability affects ASA versions 7.0–7.0.7.1, 7.1–7.1.2.61, 7.2–7.2.2.34, and 8.0–8.0.2.11 when AAA is enabled. The issue arises from the system composing %ASA-5-111008 messages using the output of the "test aaa" command, which includes cleartext passwords, and sending them t...
CVE-2007-4786
Cisco Adaptive Security Appliance ASA running PIX 7.0 before 7.0.7.1, 7.1 before 7.1.2.61, 7.2 before 7.2.2.34, and 8.0 before 8.0.2.11, when AAA is enabled, composes %ASA-5-111008 messages from the "test aaa" command with cleartext passwords and sends them over the network to a remote syslog...
Moodle < 1.6.2 Multiple Vulnerabilities
The installed version of Moodle fails to sanitize user-supplied input to a number of parameters and scripts. An attacker can leverage these issues to launch SQL injection and cross-site scripting attacks against the affected application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
CVE-2006-4786
CVE-2006-4786 affects Moodle 1.6.1 and earlier. Remote attackers can obtain sensitive information via (1) help.php and (2) other unspecified vectors involving scheduled backups, causing partial confidentiality impact. The provided connected sources confirm the vulnerability pattern but do not inc...
CVE-2005-4786
The CVE-2005-4786 issue is a buffer overflow in the ALZ archive decompression in vrAZMain.dll (version 5.8.22.137) used by HAURI antivirus products (ViRobot Expert 4.0, ViRobot Advanced Server, HAURI LiveCall). It can allow user‑assisted attackers to execute arbitrary code by processing an ALZ ar...