51 matches found
CVE-2014-4856
Cross-site scripting XSS vulnerability in the Polldaddy Polls & Ratings plugin before 2.0.25 for WordPress allows remote attackers to inject arbitrary web script or HTML via vectors related to a ratings shortcode and a unique ID. NOTE: some of these details are obtained from third party informati...
CVE-2014-4856
Polldaddy Polls & Ratings WordPress plugin vulnerability CVE-2014-4856 concerns an XSS flaw in versions prior to 2.0.25 triggered via the ratings shortcode and a unique_id parameter. The issue allows remote attackers to inject arbitrary script/HTML. Affected product: Polldaddy Polls & Ratings plu...
CVE-2012-4856
The CVE-2012-4856 vulnerability affects the IBM Power 5 Service Processor (multiple MTMs listed in vendor advisories) where the firewall code is not executed in certain network configurations, enabling remote attackers to execute arbitrary code. The underlying issue is the Service Processor faili...
IBM Power 5 Service Processor privilege escalation vulnerability
Overview IBM Power 5 Service Processor contain a vulnerability which could allow an attacker to operate with elevated privileges. Description IBM's security advisory states, "A security issue has been identified on IBM Power 5 Systems such that the firewall code does not get executed in certain...
CVE-2011-4856
The CVE concerns Parallels Plesk Panel 10.4.4_build20111103.18, where the Control Panel sends incorrect Content-Type headers for certain resources. This creates an interpretation conflict involving admin/health/parameters and other files, which could allow remote attackers to achieve an unspecifi...
CVE-2010-4856
CVE-2010-4856 affects xWeblog 2.2, vulnerable in arsiv.asp via the tarih parameter to allow remote execution of SQL commands. The vulnerability is a SQL injection in the application, enabling partial confidentiality, integrity, and availability impact per the NVD metrics (base score 7.5). Related...
CVE-2010-4856
creationtimestamp| type| source ---|---|--- 2010-10-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15219...
CVE-2009-4856
CVE-2009-4856 describes a cross-site scripting (XSS) vulnerability in the PHP Easy Shopping Cart 3.1R, specifically in subitems.php where the name parameter can be manipulated to inject arbitrary script or HTML. The vulnerability allows remote attackers to execute injected code in the context of ...
CVE-2005-4856
The CVE affects eZ publish: admin interface vulnerabilities in versions 3.5 up to 3.5.7, 3.6 up to 3.6.5, 3.7 up to 3.7.3, and 3.8 before 20051110. The issue arises from improper handling of authorization errors, allowing remote attackers to obtain sensitive information and view the admin page la...
CVE-2006-4856
CVE-2006-4856 describes multiple cross-site scripting (XSS) vulnerabilities in Roller WebLogger 2.3. The issue affects input handling through parameters such as name, email, url, content in preview, and q in sitesearch.do, allowing injection of arbitrary script/HTML. CERT notes a fix in Roller We...
