67 matches found
CVE-2009-4852
CVE-2009-4852 (and related CVEs) describes multiple cross-site scripting (XSS) vulnerabilities in SemanticScuttle prior to 0.94.1. Public records consistently cite input vectors such as the sort parameter to index.php and other unspecified vectors, enabling remote attackers to inject arbitrary sc...
Dell Remote Access Card Default Password (deprecated)
Binary data 4852.prm...
SuSE 10 Security Update : Kerberos (ZYPP Patch Number 4852)
This update fixes multiple vulnerabilities in krb5. It's unlikely that those vulnerabilities can actually be exploited. CVE-2007-5894 / CVE-2007-5902 / CVE-2007-5971 / CVE-2007-5972 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...
CVE-2005-4852
The CVE describes a vulnerability in eZ Publish core (siteaccess URIMatching) affecting versions 3.5–3.8 prior to 20050812, where all non-alphanumeric URI characters are replaced with underscores. This allows remote attackers to bypass access restrictions by crafting URIs such as /admin:de, which...
CVE-2006-4852
CVE-2006-4852 describes a SQL injection vulnerability in QuadComm Q-Shop 3.5, specifically in the browse.asp module where the OrderBy parameter can be abused to execute arbitrary SQL commands. Affected software: QuadComm Q-Shop 3.5 (browse.asp). Underlying cause: improper handling of the OrderBy ...