CVE-2008-4848

CVE-2008-4848 entry is rejected and not associated with any vulnerability; not used.

CVE-2008-4848

...

CVE-2016-4848

Cross-site scripting XSS vulnerability in ClipBucket before 2.8.1 RC2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-4848

CVE-2016-4848 affects ClipBucket; it is a Cross-Site Scripting (XSS) vulnerability in versions prior to 2.8.1 RC2. The flaw allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, potentially leading to attackers executing scripts in a victim’s browser. Public docu...

CVE-2015-4848

Technical details for CVE-2015-4848 are not publicly available in the provided documents. Monitor for updates from vendors and security advisories to learn affected products, impact, and remediation.

Path Traversal in Oracle GlassFish Server Open Source Edition

This module exploits an unauthenticated directory traversal vulnerability which exists in administration console of Oracle GlassFish Server 4.1, which is listening by default on port 4848/TCP. Module Options msf use auxiliary/scanner/http/glassfish/traversal msf undefinedtraversal show actions...

CVE-2014-4848

Cross-site scripting XSS vulnerability in the Blogstand Banner blogstand-smart-banner plugin 1.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the bsblogid parameter to wp-admin/options-general.php...

CVE-2014-4848

The CVE-2014-4848 entry concerns the Blogstand Smart Banner WordPress plugin (version 1.0). A stored/reflected XSS vulnerability exists in the bs_blog_id parameter passed to wp-admin/options-general.php, enabling attackers to inject arbitrary script/HTML. Impact is web-page script execution by re...

CVE-2014-4848

Cross-site scripting XSS vulnerability in the Blogstand Banner blogstand-smart-banner plugin 1.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the bsblogid parameter to wp-admin/options-general.php...

CVE-2012-4848

IBM Lotus Foundations Start before 1.2.2c contains multiple cross-site scripting (XSS) vulnerabilities that allow remote authenticated users to inject arbitrary web script or HTML via the Webconfig Users user-attribute fields (First Name or Last Name). The underlying issue is XSS in the affected ...

CVE-2011-4848

The CVE-2011-4848 entry concerns Parallels Plesk Panel 10.4.4_build20111103.18. The Control Panel erroneously places a submitted password inside an HTTP response body, enabling remote attackers to obtain sensitive information by sniffing the network. Documented in NVD, the impact is information d...

CVE-2010-4848

CVE-2010-4848 describes multiple cross-site scripting (XSS) vulnerabilities in addlink.php of AXScripts AxsLinks 0.3. Attackers can inject arbitrary scripts via the (1) url or (2) title parameters. Documentation confirms the affected component and entry details; no remediation steps or patches ar...

Oracle GlassFish Server - Administration Console Authentication Bypass

Oracle GlassFish Server Administration Console Authentication Bypass 1. Advisory Information Title: Oracle GlassFish Server Administration Console Authentication Bypass Advisory ID: CORE-2010-1118 Advisory URL: http://www.coresecurity.com/content/glassfishadminauthenticationbypass Date published:...

Oracle GlassFish/System Application Server Security Bypass Vulnerability

The host is running GlassFish/System Application Server and is prone to security bypass vulnerability. OpenVAS Vulnerability Test $Id: gboracleglassfishnsjassecbypassvuln.nasl 7015 2017-08-28 11:51:24Z teissa $ Oracle GlassFish/System Application Server Security Bypass Vulnerability Authors: Antu...

ZDI-11-137: Oracle Application Server Authentication Bypass Remote Code Execution Vulnerability

ZDI-11-137: Oracle Application Server Authentication Bypass Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-137 April 19, 2011 -- CVE ID: CVE-2011-0807 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Oracle -- Affected Products: Oracle Applicati...

Oracle Application Server Authentication Bypass Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle GlassFish Application Server and Oracle Java Application Server. Authentication is not required to exploit this vulnerability. The flaw exists within the Web Administration component which...

CVE-2009-4848

ToutVirtual VirtualIQ Pro 3.2 (build 7882) and 3.5 (build 8691) contain multiple cross-site scripting (XSS) vulnerabilities. The flaws allow remote attackers to inject arbitrary web script or HTML via the following parameters: (1) userId in tvserver/server/user/setPermissions.jsp, (2) deptName in...

CVE-2007-4848

CVE-2007-4848 affects Microsoft Internet Explorer 4.0–7. The issue allows remote attackers to determine whether local files have associated images by using a res:// URI in the src property of a JavaScript Image object, demonstrated with bitmap data inside a (1) .exe or (2) .dll file. The connecte...

CVE-2005-4848

CVE-2005-4848 affects Research in Motion BlackBerry Enterprise Server 4.0 SP1 and earlier (before 20050607). The issue is a buffer overflow in the decompression algorithm, enabling remote attackers to execute arbitrary code via certain data packets. The provided sources confirm the vulnerability’...

CVE-2006-4848

Multiple PHP remote file inclusion vulnerabilities in Brian Fraval Hitweb 3.0 allow remote attackers to execute arbitrary PHP code via a URL in the REPCLASS parameter to 1 index.php, 2 arbo.php, 3 framepoint.php, 4 genpage.php, 5 lienvalider.php, 6 appreciation.php, 7 partenariat.php, 8...