83 matches found
CVE-2017-10945
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.0.14878. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2017-10945
Foxit Reader 8.3.0.14878 (and earlier) is affected by CVE-2017-10945 due to a use-after-free in the app.alert function caused by not validating an object before operations. This enables remote code execution with user interaction required (target must open a malicious file/page). Related advisori...
CVE-2016-4855
Cross-site scripting vulnerability in ADOdb versions prior to 5.20.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2016-4855
CVE-2016-4855 describes a cross-site scripting vulnerability in the PHP ADOdb library. The issue affects ADOdb versions prior to 5.20.6 and allows remote attackers to inject arbitrary script or HTML via unspecified vectors, with potential alteration of the user’s browser context. Public details c...
CVE-2015-4855
CVE-2015-4855 is rejected/not used; this entry does not represent an active vulnerability.
Fedora 24 : php-adodb (2016-fed6f8c57d)
Security fix for CVE-2016-4855 1373374 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEV...
Fedora 23 : php-adodb (2016-7d6ca385a4)
Security fix for CVE-2016-4855 1373374 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEV...
Fedora Update for php-adodb FEDORA-2016-fed6f8c57d
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2014-4855
Cross-site scripting XSS vulnerability in the Polylang plugin before 1.5.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via vectors related to a user description. NOTE: some of these details are obtained from third party information...
CVE-2014-4855
Cross-site scripting XSS vulnerability in the Polylang plugin before 1.5.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via vectors related to a user description. NOTE: some of these details are obtained from third party information...
CVE-2014-4855
Polylang WordPress plugin (before 1.5.2) is affected by a stored XSS via the user description field. The vulnerability allows remote injection of script/HTML; affected component is the Polylang plugin for WordPress, prior to version 1.5.2. Remediation observed in sources is to update to 1.5.2 or ...
CVE-2012-4855
Technical details about CVE-2012-4855 are not publicly provided in the supplied documents. No concrete information on affected product versions, root cause, or remediation is present. Monitor for updates.
CVE-2011-4855
The CVE-2011-4855 entry concerns Parallels Plesk Panel 10.4.4_build20111103.18, where the Control Panel omits the Content-Type header charset parameter for certain resources. This omission could allow remote attackers to cause an unspecified impact by exploiting an interpretation conflict involvi...
CVE-2010-4855
The CVE-2010-4855 entry describes a SQL injection in Oku.asp of xWeblog 2.2, exploitable via the makale_id parameter. The underlying issue is an injectable input vector that allows remote attackers to execute arbitrary SQL commands. Affected software is xWeblog 2.2 (Oku.asp); no specific vendor v...
CVE-2010-4855
creationtimestamp| type| source ---|---|--- 2010-10-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15218...
CVE-2009-4855
SQL injection vulnerability in index.php in TYPO3 4.0 allows remote attackers to execute arbitrary SQL commands via the showUid parameter. NOTE: the TYPO3 Security Team disputes this report, stating that "there is no such vulnerability... The showUid parameter is generally used in third-party TYP...
CVE-2009-4855
TYPO3 4.0 is affected by a SQL injection vulnerability in index.php via the showUid parameter. The root cause is an injectable showUid value, enabling remote attackers to alter SQL commands. The TYPO3 Security Team disputes the report, noting the showUid parameter is commonly used in third‑party ...
CVE-2009-4855
SQL injection vulnerability in index.php in TYPO3 4.0 allows remote attackers to execute arbitrary SQL commands via the showUid parameter. NOTE: the TYPO3 Security Team disputes this report, stating that "there is no such vulnerability... The showUid parameter is generally used in third-party TYP...