83 matches found
CVE-2011-4830
Multiple cross-site scripting XSS vulnerabilities in the comlisting component in Barter Sites component 1.3 for Joomla! allow remote authenticated users to inject arbitrary web script or HTML via the 1 listingtitle, 2 description, 3 homeurl aka Website Address, 4 paystring aka Payment types...
CVE-2011-4830
The CVE-2011-4830 issue covers Joomla! Barter Sites component “com_listing” (1.3) with multiple XSS vulnerabilities affecting parameters listed in index.php (listing_title, description, homeurl, paystring, sell_price, shipping_cost, quantity). Connected OpenVAS entries also indicate an SQL Inject...
CVE-2011-4830
Multiple cross-site scripting XSS vulnerabilities in the comlisting component in Barter Sites component 1.3 for Joomla! allow remote authenticated users to inject arbitrary web script or HTML via the 1 listingtitle, 2 description, 3 homeurl aka Website Address, 4 paystring aka Payment types...
CVE-2011-4830
creationtimestamp| type| source ---|---|--- 2011-10-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18046...
CVE-2010-4830
SQL injection vulnerability in Resumes/TDRESUMEIndlist.asp in Techno Dreams T-Dreams Job Career Package 3.0 allows remote attackers to execute arbitrary SQL commands via the zResidency parameter...
CVE-2010-4830
The CVE-2010-4830 entry concerns Techno Dreams (T-Dreams) Job Career Package 3.0. It describes an SQL injection in Resumes/TD_RESUME_Indlist.asp that can be exploited via the z_Residency parameter to execute arbitrary SQL commands. The NVD entry provides a CVSS2 base score of 7.5 (HIGH) with netw...
CVE-2010-4830
creationtimestamp| type| source ---|---|--- 2010-12-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15678...
EnjoySAP SAP GUI ActiveX Control Arbitrary File Download
This module allows remote attackers to place arbitrary files on a users file system by abusing the "CompDownload" method in the SAP KWEdit ActiveX Control kwedit.dll 6400.1.1.41. This module requires Metasploit: https://metasploit.com/download Current source:...
CVE-2008-4830
creationtimestamp| type| source ---|---|--- 2010-12-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16493 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/enjoysapguicompdownload.rb 2025-02-06...
CVE-2009-4830
CVE-2009-4830 affects OpenX 2.8.1 and 2.8.2 with an authentication bypass vulnerability in the OpenX administrative interface. Multiple sources describe an ability for remote attackers to bypass login and gain Administrator access via unknown vectors, with potential relation to admin-related file...
OpenX install.php / install-plugin.php Admin Authentication Bypass
The version of OpenX hosted on the remote web server has an authentication bypass vulnerability. Sending a specially crafted request to install.php or install-plugin.php bypasses the normal authentication process. A remote attacker could exploit this to gain administrative access to the OpenX...
Secunia Research: SAP GUI KWEdit ActiveX Control "SaveDocumentAs()" Insecure Method
====================================================================== Secunia Research 15/04/2009 - SAP GUI KWEdit ActiveX Control "SaveDocumentAs" Insecure Method - ====================================================================== Table of Contents Affected...
CVE-2008-4830
CVE-2008-4830 is an insecure method vulnerability in SAP GUI’s KWEdit ActiveX control (KWEDIT.DLL 6400.1.1.41 and 7100.1.1.43). The SaveDocumentAs method can allow an attacker to overwrite arbitrary files, and the OpenDocument method can read or execute arbitrary files on a remote host. Affected ...
CVE-2007-4830
The CVE-2007-4830 entry describes a Cross-site scripting (XSS) vulnerability in CMD_BANDWIDTH_BREAKDOWN affecting DirectAdmin 1.30.2 and earlier. The underlying issue allows an attacker to inject arbitrary web script or HTML via the user parameter. According to the NVD entry, the impact is limite...
CVE-2005-4830
CVE-2005-4830 documents a CRLF injection vulnerability in ViewCVS version 0.9.2 of the viewcvs component. The flaw allows remote attackers to inject arbitrary HTTP headers and perform HTTP response splitting by sending CRLF sequences in the content-type parameter. Affected software is ViewCVS 0.9...
CVE-2006-4830
CVE-2006-4830 affects Blojsom 2.30, via EditBlogTemplatesPlugin.java. A directory traversal vulnerability is triggered by an HTTP request containing a crafted blogTemplate value, with impact described as unknown in the entry. No exploitation details or patch information are provided in the connec...
CVE-2005-4830
CRLF injection vulnerability in viewcvs in ViewCVS 0.9.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the content-type parameter...
