IBM WebSphere Portal 8.0.0.x < 8.0.0.1 CF15 Multiple Vulnerabilities

The version of IBM WebSphere Portal installed on the remote host is 8.0.0.x prior to 8.0.0.1 CF15. It is, therefore, affected by multiple vulnerabilities : - A flaw exists in 'Apache Commons HttpClient' that allows a man-in-the-middle attacker to spoof SSL servers via a certificate with a subject...

Joomla Component com_hmcommunity SQL Injection (CVE-2011-4808)

An SQL injection vulnerability has been reported in Joomlaextensions Com Hmcommunity. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

[security bulletin] HPSBMU02915 rev.1 - HP Service Manager, Remote Unauthenticated Access and Elevation of Privilege

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03888320 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03888320 Version: 1 HPSBMU02915 rev....

CVE-2013-4808

CVE-2013-4808 affects HP Service Manager (versions 7.11, 9.21, 9.30, 9.31) and HP Service Center 6.2.8. The HP Security Bulletin reports a potential for remote unauthenticated access and elevation of privilege. Base CVSS v2.0 vector is AV:N/AC:L/Au:N/C:P/I:P/A:P with a base score of 7.5. Remediat...

CVE-2011-4808

SQL injection vulnerability in the HM Community comhmcommunity component before 1.01 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a fndhome action to index.php...

CVE-2011-4808

The vulnerability described for CVE-2011-4808 affects the Joomla!HM Community (com_hmcommunity) component prior to version 1.01. The issue is an SQL injection in the fnd_home action of index.php, exploitable via the id parameter, allowing remote attackers to execute arbitrary SQL commands. All co...

CVE-2011-4808

creationtimestamp| type| source ---|---|--- 2011-10-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18050...

CVE-2010-4808

SQL injection vulnerability in index.php in Webmatic allows remote attackers to execute arbitrary SQL commands via the p parameter...

CVE-2010-4808

The provided documents confirm a SQL injection vulnerability in Webmatic’s index.php exploitable via the p parameter, enabling remote execution of arbitrary SQL commands. Affected software/component: Webmatic (index.php). Root cause: improper handling of the p parameter leading to SQL injection. ...

CVE-2010-4808

creationtimestamp| type| source ---|---|--- 2010-11-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15517...

CVE-2009-4808

CVE-2009-4808 affects Graugon PHP Article Publisher 1.0. The admin.php authentication check can be bypassed by setting the g_admin cookie to 1, allowing remote attackers to gain administrative access. This is the root cause and impact described across sources; no remediation or mitigation details...

Mandrake Linux Security Advisory : imlib2 (MDKSA-2007:156)

M Joonas Pihlaja discovered several vulnerabilities in the Imlib2 graphics library. The load function of several of the Imlib2 image loaders does not check the width and height of an image before allocating memory. As a result, a carefully crafted image file can trigger a segfault when an...

CVE-2009-4808

creationtimestamp| type| source ---|---|--- 2008-11-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6929 2009-03-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8133...

CVE-2008-4808

IBM Lotus Connections 2.x before 2.0.1 is affected by a vulnerability that allows attackers to discover passwords via unspecified vectors. The provided documents do not specify the exact vectors, root cause, affected components, or remediation details. Users should monitor for official updates fo...

Sql injection

SQL injection vulnerability in TLM CMS 3.1 allows remote attackers to execute arbitrary SQL commands via the nom parameter to a-b-membres.php. NOTE: the goodies.php vector is already covered by CVE-2007-4808. NOTE: the provenance of this information is unknown; the details are obtained solely fro...

Gentoo Security Advisory GLSA 200612-20 (imlib2)

The remote host is missing updates announced in advisory GLSA 200612-20. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2007-4808

CVE-2007-4808 describes multiple SQL injection vulnerabilities in TLM CMS 3.2 (also affecting 3.1/1.1 via notes) that allow remote attackers to inject arbitrary SQL through six parameters across several scripts (news.php, goodies.php, file.php, affichage.php, mod_forum/afficher.php, mod_forum/mes...

CVE-2006-4808

Heap-based buffer overflow in loadertga.c in imlib2 before 1.2.1, and possibly other versions, allows user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted TGA image...

CVE-2006-4808

Vulnerability: imlib2 before 1.2.1 contains a heap-based overflow in loader_tga.c (TGA image loader) that can be triggered by a crafted TGA image, potentially causing denial of service and possibly leading to arbitrary code execution. Affected: imlib2 and possibly other versions; root cause is he...

phpBB lat2cyr Mod 1.0.1 - 'lat2cyr.php' Remote File Inclusion

!/usr/bin/perl phpBB lat2cyr 1.0.1 Class: Remote File Include Vulnerability Patch: unavailable Date: 2006/10/12 Remote: Yes Type: high Site: http://www.phpbbhacks.com/download/4808...