CVE-2015-4827

Unspecified vulnerability in the Oracle Retail Open Commerce Platform component in Oracle Retail Applications 3.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Framework...

CVE-2015-4827

CVE-2015-4827 affects the Oracle Retail Open Commerce Platform component within Oracle Retail Applications 3.0. The vulnerability is described as allowing remote attackers to affect confidentiality and integrity via unknown vectors related to Framework. No root cause or specific exploit vectors a...

Vmist Downstat art Parameter PHP Code Execution - Ver2 (CVE-2006-4827)

A code execution vulnerability has been reported in Vmist Downstat. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

HP Intelligent Management Center APM Module < 7.0 E0101 SQL Injection

The version of the HP Intelligent Management Center Application Performance Manager Module on the remote host does not properly sanitize the 'monitorId' parameter in the 'AppDataDaoImpl' class, allowing for remote SQL injection attacks. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

CVE-2013-4827

HP iMC and HP IMC Service Operation Management Software Module are affected by CVE-2013-4827 via SQL injection in the APM/monitorId path (AppDataDaoImpl). The vulnerability enables remote SQL injection without authentication. The HP security bulletin lists fixes by product/version, e.g., IMC APM ...

CVE-2011-4827

CVE-2011-4827 involves multiple cross-site scripting (XSS) vulnerabilities in AutoSec Tools V-CMS 1.0. The issues occur in a) redirect.php via the p parameter and b) includes/TrueColorPicker/index.php via the box parameter, caused by improper handling in includes/TrueColorPicker/class.TrueColorPi...

CVE-2010-4827

The CVE-2010-4827 entry affects Snitz Forums 2000, version 3.4.07. It describes a Cross-site Scripting (XSS) vulnerability in the members.asp page, exploitable via the M_NAME parameter. The issue enables remote attackers to inject arbitrary web script or HTML. The NVD entry notes reliance on thir...

CVE-2009-4827

The CVE-2009-4827 issue affects Mail Manager Pro, specifically the admin.php component. A cross-site request forgery (CSRF) vulnerability exists that allows remote attackers to hijack administrator sessions and perform password-change actions via a crafted request. The underlying impact is that a...

Hyper Text Caching Protocol (HTCP) Detection

The remote service supports the Hyper Text Caching Protocol HTCP, used for discovering HTTP caches and cached data, managing sets of HTTP caches, and monitoring cache activity. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid45608; scriptversion"1.5";...

SAP GUI TabOne ActiveX Control Caption List Buffer Overflow (CVE-2008-4827)

The SAP GUI is the GUI client in SAP's 3-tier architecture of database, application server and client. The SAP GUI family is available for Windows, Java, and HTML/Internet Transaction Server ITS environment. There exists a buffer overflow vulnerability in the SAP GUI. Remote attackers can exploit...

CVE-2009-4827

creationtimestamp| type| source ---|---|--- 2009-12-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10433...

Secunia Research: TSC2 Help Desk CTab ActiveX Control Buffer Overflow

====================================================================== Secunia Research 07/01/2009 - TSC2 Help Desk CTab ActiveX Control Buffer Overflow - ====================================================================== Table of Contents Affected...

CVE-2008-4827

Multiple heap-based buffer overflows in the AddTab method in the 1 Tab and 2 CTab ActiveX controls in c1sizer.ocx and the 3 TabOne ActiveX control in sizerone.ocx in ComponentOne SizerOne 8.0.20081.140, as used in ComponentOne Studio for ActiveX 2008, TSC2 Help Desk 4.1.8, SAP GUI 6.40 Patch 29 a...

CVE-2007-4827

CVE-2007-4827 affects Automated Solutions Modbus Slave ActiveX Control (MiniHMI.exe) and its Modbus/TCP Diagnostic function. The vulnerability occurs when processing malformed Modbus requests to TCP port 502, causing heap corruption and potentially arbitrary code execution. The issue is remote an...

TPTI-07-15: Automated Solutions Modbus TCP Slave ActiveX Control Heap Corruption Vulnerability

TPTI-07-15: Automated Solutions Modbus TCP Slave ActiveX Control Heap Corruption Vulnerability http://www.zerodayinitiative.com/advisories/TPTI-07-15.html September 17, 2007 -- CVE ID: CVE-2007-4827 -- Affected Vendor: Automated Solutions -- Affected Products: Modbus RTU/ASCII/TCP Slave ActiveX...

CVE-2005-4827

CVE-2005-4827 affects Internet Explorer 6.0 (and possibly other versions). It describes a bypass of the same-origin policy by calling open on an XMLHttpRequest object (Microsoft.XMLHTTP) with a method name containing tab, newline, or carriage return characters, a pattern some proxies convert to s...

CVE-2006-4827

CVE-2006-4827 affects Vmist Downstat (version 1.8 and earlier). The vulnerability is a PHP remote file inclusion that allows an attacker to execute arbitrary PHP code by supplying a crafted URL in the art parameter to one of four scripts: admin.php, chart.php, modes.php, or stats.php. The root ca...

CVE-2018-4827

CVE-2018-4827 entry is rejected/unused per the description.