72 matches found
CVE-2014-4853
CVE-2014-4853 is a reported cross-site scripting (XSS) flaw in OpenDocMan’s odm-init.php prior to version 1.2.7.3. The vulnerability allows remote authenticated users to inject arbitrary web script or HTML by supplying a specially crafted file name during upload. Public sources from NVD and CVE l...
CVE-2012-4853
CVE-2012-4853 describes a cross-site request forgery (CSRF) in IBM WebSphere Application Server. Affected versions are 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1. The vulnerability could allow an attacker to hijack the authentication of a user for request...
CVE-2011-4853
CVE-2011-4853 affects Parallels Plesk Panel 10.4.4_build20111103.18. The Control Panel exposes an RFC 1918 (private) IP address within a web page, which allows remote attackers to read the page and potentially access sensitive information. Demonstrated by access to smb/user/list-data/items-per-pa...
CVE-2010-4853
CVE-2010-4853 describes a SQL injection vulnerability in the Joomla! extension ccInvoices (com_ccinvoices). The issue arises from the id parameter in the viewInv action of index.php, allowing remote attackers to manipulate SQL queries. Affected software is Joomla! component ccInvoices; the vulner...
CVE-2010-4853
creationtimestamp| type| source ---|---|--- 2010-11-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15430...
CVE-2009-4853
CVE-2009-4853 describes multiple cross-site scripting (XSS) vulnerabilities in JumpBox before 1.1.2 for Foswiki Wiki System. The data states remote attackers can inject arbitrary web script or HTML via unspecified vectors. The NVD entry provides a CVSS v2 base score of 4.3 (Medium) with impact: c...
CVE-2005-4853
CVE-2005-4853 affects the forum package in eZ publish. In default configurations, edit permissions are not restricted to the posting’s owner, allowing remote authenticated users to edit arbitrary postings. Affected versions are: eZ publish 3.5 before 3.5.5; 3.6 before 3.6.2; 3.7 before 3.7.0rc2; ...
CVE-2006-4853
SQL injection vulnerability in kategorix.asp in Haberx 1.02 through 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in kategorihaberx.asp...
CVE-2006-4853
SQL injection vulnerability in kategorix.asp in Haberx 1.02 through 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in kategorihaberx.asp...
CVE-2006-4853
The CVE-2006-4853 entry describes an SQL injection vulnerability affecting Haberx, specifically in kategorix.asp (versions 1.02 through 1.1) where the id parameter in kategorihaberx.asp can be exploited to execute arbitrary SQL. The underlying issue is improper handling of user input in the appli...
