80 matches found
CVE-2017-4853
CVE-2017-4853 is rejected; this CVE entry is not an active vulnerability.
CVE-2015-4853
CVE-2015-4853 entry is rejected/not used and does not represent an active vulnerability.
CVE-2008-4853
CVE-2008-4853 is rejected/not used; this candidate does not represent an active vulnerability entry.
CVE-2016-4853
AKABEi SOFT2 games allow remote attackers to execute arbitrary OS commands via crafted saved data, as demonstrated by Happy Wardrobe...
CVE-2016-4853
CVE-2016-4853 affects AKABEi SOFT2 games. Affected component: game code that loads saved data. Root cause: crafted saved data enables an OS command injection, allowing execution of arbitrary commands. Impact: remote attacker could cause arbitrary commands to run within the affected game context, ...
CVE-2014-4853
CVE-2014-4853 is a reported cross-site scripting (XSS) flaw in OpenDocMan’s odm-init.php prior to version 1.2.7.3. The vulnerability allows remote authenticated users to inject arbitrary web script or HTML by supplying a specially crafted file name during upload. Public sources from NVD and CVE l...
CVE-2012-4853
CVE-2012-4853 describes a cross-site request forgery (CSRF) in IBM WebSphere Application Server. Affected versions are 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1. The vulnerability could allow an attacker to hijack the authentication of a user for request...
CVE-2011-4853
CVE-2011-4853 affects Parallels Plesk Panel 10.4.4_build20111103.18. The Control Panel exposes an RFC 1918 (private) IP address within a web page, which allows remote attackers to read the page and potentially access sensitive information. Demonstrated by access to smb/user/list-data/items-per-pa...
CVE-2010-4853
CVE-2010-4853 describes a SQL injection vulnerability in the Joomla! extension ccInvoices (com_ccinvoices). The issue arises from the id parameter in the viewInv action of index.php, allowing remote attackers to manipulate SQL queries. Affected software is Joomla! component ccInvoices; the vulner...
CVE-2010-4853
creationtimestamp| type| source ---|---|--- 2010-11-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15430...
CVE-2009-4853
CVE-2009-4853 describes multiple cross-site scripting (XSS) vulnerabilities in JumpBox before 1.1.2 for Foswiki Wiki System. The data states remote attackers can inject arbitrary web script or HTML via unspecified vectors. The NVD entry provides a CVSS v2 base score of 4.3 (Medium) with impact: c...
CVE-2005-4853
CVE-2005-4853 affects the forum package in eZ publish. In default configurations, edit permissions are not restricted to the posting’s owner, allowing remote authenticated users to edit arbitrary postings. Affected versions are: eZ publish 3.5 before 3.5.5; 3.6 before 3.6.2; 3.7 before 3.7.0rc2; ...
CVE-2006-4853
SQL injection vulnerability in kategorix.asp in Haberx 1.02 through 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in kategorihaberx.asp...
CVE-2006-4853
The CVE-2006-4853 entry describes an SQL injection vulnerability affecting Haberx, specifically in kategorix.asp (versions 1.02 through 1.1) where the id parameter in kategorihaberx.asp can be exploited to execute arbitrary SQL. The underlying issue is improper handling of user input in the appli...
CVE-2006-4853
SQL injection vulnerability in kategorix.asp in Haberx 1.02 through 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in kategorihaberx.asp...
