134 matches found
CVE-2010-4803
CVE-2010-4803 affects Mojolicious (Perl) prior to version 0.999927, due to improper HMAC-MD5 checksum implementation. Multiple connected advisories confirm this set of Mojolicious vulnerabilities (CVE-2010-4802, CVE-2010-4803, CVE-2011-1841) with remote impact in affected deployments. Debian DSA-...
CVE-2009-4803
CVE-2009-4803 affects the TYPO3 Accessibility Glossary extension (a21glossary) up to version 0.4.10 and earlier. The vulnerability is an SQL injection in the extension that allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Documents consistently describe the issue...
CVE-2009-4803
SQL injection vulnerability in the Accessibility Glossary a21glossary extension 0.4.10 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2007-4803
creationtimestamp| type| source ---|---|--- 2009-03-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8312...
CVE-2008-4803
Cross-site scripting XSS vulnerability in index.php in Simple PHP Scripts gallery 0.1, 0.3, and 0.4 allows remote attackers to inject arbitrary web script or HTML via the gallery parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...
CVE-2008-4803
CVE-2008-4803 affects the Simple PHP Scripts Gallery (index.php) versions 0.1, 0.3 and 0.4. The vulnerability is a reflected XSS triggered through the gallery parameter, allowing an attacker to inject arbitrary script/HTML. The available documents do not provide remediation details or explicit ex...
CVE-2007-4803
CVE-2007-4803 describes a buffer overflow in AtomixMP3 2.3, where long strings in the File1 and Title1 fields of a .pls file allow a user‑assisted remote attacker to execute arbitrary code. This vulnerability is a different vector from CVE-2006-6287 and CVE-2007-2487. Several sources in the conne...
CVE-2006-4803
The CVE-2006-4803 entry concerns Novell Identity Manager (IDM) 3.0.1, where the Fan-Out Linux and UNIX receiver scripts allow local users to execute arbitrary commands via unspecified vectors involving certain environment variables and code injection. Impact is local command execution with comple...
CVE-2005-4803
Graphviz before 2.2.1 is vulnerable to a local privilege escalation via a symlink attack on temporary files, allowing local users to overwrite arbitrary files due to insecure temporary-file creation. The issue is correctly identified as CVE-2005-4803 (not CVE-2005-2965). Affected component: graph...
CVE-2005-4803
graphviz before 2.2.1 allows local users to overwrite arbitrary files via a symlink attack on temporary files. NOTE: this issue was originally associated with a different CVE identifier, CVE-2005-2965, which had been used for multiple different issues. This is the correct identifier...
CVE-2005-4803
graphviz before 2.2.1 allows local users to overwrite arbitrary files via a symlink attack on temporary files. NOTE: this issue was originally associated with a different CVE identifier, CVE-2005-2965, which had been used for multiple different issues. This is the correct identifier...
CVE-2005-2965
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-4802, CVE-2005-4803. Reason: this candidate was intended for one issue, but the description and references inadvertently combined multiple issues. Notes: All CVE users should consult CVE-2005-4802 and CVE-2005-4803 to determi...
