70 matches found
CVE-2011-4798
This CVE entry is rejected/not used and does not represent an active vulnerability entry.
CVE-2012-4798
CVE-2012-4798 is rejected/not used; this CVE entry does not represent an active vulnerability.
CVE-2015-4798
Technical details for CVE-2015-4798 are not publicly available in the provided documents. Monitor for updates from official advisories.
CVE-2013-4798
creationtimestamp| type| source ---|---|--- 2013-09-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/28083 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/hploadrunnerwritefilestring.rb 2025-02-06...
HP LoadRunner - lrFileIOService ActiveX WriteFileString Remote Code Execution (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 HttpClients::IE,...
DSquare Exploit Pack: D2SEC_LRWEB
Name| d2seclrweb ---|--- CVE| CVE-2013-4798 Exploit Pack| D2ExploitPack Description| HP LoadRunner lrFileIOService ActiveX WriteFileString Remote Code Execution Vulnerability Notes|...
CVE-2013-4798
HP LoadRunner prior to 11.52 is vulnerable via the lrFileIOService ActiveX WriteFileString method, which does not sanitize input and allows a remote attacker to write files (directory traversal) potentially enabling code execution. The issue affects Windows platforms and has been addressed by upg...
CVE-2013-4798
Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1705...
CVE-2010-4798
Directory traversal vulnerability in index.php in OrangeHRM 2.6.0.1 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the uri parameter...
CVE-2010-4798
CVE-2010-4798 affects OrangeHRM 2.6.0.1 (and related versions such as 2.6.1 per OpenVAS references). The issue is a directory traversal/local file include (LFI) vulnerability in index.php triggered via unsafely processed uri parameter, enabling an attacker to include and execute arbitrary local f...
OrangeHRM <= 2.6.1 'uri' Parameter LFI Vulnerability
OrangeHRM is prone to a local file include LFI vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
CVE-2010-4798
creationtimestamp| type| source ---|---|--- 2010-10-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15232...
CVE-2009-4798
CVE-2009-4798 affects Diskos CMS 6.x, with multiple SQL injection flaws exposed via the (1) kat parameter to side.asp and (2) brugerid and (3) password fields in the administration login. The root cause is improper input handling allowing arbitrary SQL execution by remote attackers. The available...
UW-IMAP < 2007e c-client Library Overflow
Binary data 4798.prm...
CVE-2008-4798
The loadModule function in lib/WebGUI/Asset.pm in WebGUI before 7.5.30 stable allows remote attackers to execute arbitrary code by uploading a Perl module and accessing it via a crafted URL...
CVE-2008-4798
The CVE concerns WebGUI prior to version 7.5.30 (stable). The loadModule function in lib/WebGUI/Asset.pm allows remote attackers to execute arbitrary code by uploading a Perl module and accessing it via a crafted URL. This enables remote code execution on the affected server. According to the pro...
CVE-2008-4798
The loadModule function in lib/WebGUI/Asset.pm in WebGUI before 7.5.30 stable allows remote attackers to execute arbitrary code by uploading a Perl module and accessing it via a crafted URL...
Debian: Security Advisory (DSA-1183-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 1184-1 (kernel-source-2.6.8)
The remote host is missing an update to kernel-source-2.6.8 announced via advisory DSA 1184-1. For details, please visit the referenced security advisories. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a...