86 matches found
CVE-2008-4792
The core BlogAPI module in Drupal 5.x before 5.11 and 6.x before 6.5 does not properly validate unspecified content fields of an internal Drupal form, which allows remote authenticated users to bypass intended access restrictions via modified field values...
CVE-2008-4792
The CVE-2008-4792 issue affects Drupal 5.x before 5.11 and 6.x before 6.5, where the core BlogAPI module fails to validate unspecified content fields in an internal form. This allows remote authenticated users to bypass access restrictions by altering field values. The vulnerability is described ...
CVE-2007-4792
CVE-2007-4792 describes a buffer overflow in ibstat within devices.common.IBM.ib.rte on IBM AIX 5.3, enabling local users to gain privileges via unspecified vectors. The vulnerability is tied to the IBM AIX 5.3 environment and specifically affects the ibstat component of the devices.common.IBM.ib...
CVE-2005-4792
CVE-2005-4792 is a SQL injection in phpWebSite’s index.php (versions
CVE-2005-4792
SQL injection vulnerability in index.php in Appalachian State University phpWebSite 0.10.1 and earlier allows remote attackers to execute arbitrary SQL commands via the module parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...
CVE-2018-4792
CVE-2018-4792 is rejected/not used by its CNA and does not represent an active vulnerability entry.