54 matches found
CVE-2010-4797
Multiple SQL injection vulnerabilities in the log-in form in Truworth Flex Timesheet allow remote attackers to execute arbitrary SQL commands via the 1 Username and 2 Password fields...
CVE-2010-4797
creationtimestamp| type| source ---|---|--- 2010-10-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15220...
CVE-2009-4797
CVE-2009-4797 describes an SQL injection in JobHut browse.php for versions 1.2 and earlier, exploitable via the pk parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands and may impact data confidentiality, integrity, and availability as described in the CVSS 2.0 v...
CVE-2009-4797
creationtimestamp| type| source ---|---|--- 2009-03-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8318...
CVE-2008-4797
Kantan WEB Server 1.8 and earlier contains a directory traversal vulnerability that could allow a remote attacker to read arbitrary files on the server. The issue is confirmed across multiple sources (NVD/NVD-mirrors and JVN) and is described as a directory traversal flaw in Kantan WEB Server. Im...
CVE-2007-4797
CVE-2007-4797 describes multiple buffer overflows in unspecified svprint (System V print) commands within IBM AIX 5.2/5.3 and the bos.svprint.rte package. The vulnerability allows local privilege escalation by unspecified vectors. The sources confirm the affected product/component but do not prov...
CVE-2006-4797
CVE-2006-4797 describes a cross-site scripting (XSS) vulnerability in CloudNine Interactive CJ Tag Board 3.0 . The flaw occurs in the tag.php handler, where an attacker can inject arbitrary web script or HTML by abusing a JavaScript event in a url BBcode tag within the cjmsg parameter. This is a ...
CVE-2006-4797
Cross-site scripting XSS vulnerability in tag.php in CloudNine Interactive CJ Tag Board 3.0 allows remote attackers to inject arbitrary web script or HTML via a JavaScript event in a url BBcode tag in the cjmsg parameter...
CVE-2005-4797
CVE-2005-4797: A directory-traversal vulnerability in the Solaris printd (lp) daemon (lpd) affects Solaris 7–10. It allows remote deletion of arbitrary files via ".." in an Unlink data file command, with the lpd process typically running as root. Public references include Metasploit exposure (Sol...
Solaris 10 (sparc) : 120467-05
SunOS 5.10: lp patch. Date this patch was last updated by Sun : Sep/08/06 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0...
Solaris 9 (x86) : 114980-31
SunOS 5.9x86: lp Patch. Date this patch was last updated by Sun : Nov/30/10 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...
Solaris 9 (sparc) : 113329-30
SunOS 5.9: lp Patch. Date this patch was last updated by Sun : Dec/03/10 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0...