CVE-2015-4871

CVE-2015-4871 is an unspecified vulnerability in Oracle Java SE 7u85 affecting the Libraries component, enabling remote attackers to affect confidentiality and integrity via unknown vectors. Public advisories (Debian, CentOS/Red Hat/OpenJDK related updates) indicate Java 7 OpenJDK packages were p...

CVE-2014-4871

The CVE-2014-4871 vulnerability affects NetCommWireless NB604N routers (firmware prior to GAN5.CZ56T-B-NC.AU-R4B030.EN). A stored XSS flaw exists in wlsecurity.html via the wlWpaPsk parameter, allowing an attacker to inject scripts that run in an authenticated user’s context. Reported base CVSS ~...

CVE-2013-4871

Cross-site request forgery CSRF vulnerability in the TEQneers SEO Enhancements tqseo extension before 5.0.1 for TYPO3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2013-4871

CVE-2013-4871 affects the TEQneers SEO Enhancements (tq_seo) extension for TYPO3, specifically versions prior to 5.0.1. The vulnerability is a Cross-site Request Forgery (CSRF) that could allow remote attackers to hijack user authentication via unknown vectors. The vulnerability originates in the...

Open Automation Software OPC Systems.NET Vulnerability

Overview This Advisory is a follow-up to “ICS-ALERT-11-285-01—Open Automation Software OPC Systems.NET Vulnerability” that was posted on the ICS-CERT website on October 12, 2011. Independent researcher Luigi Auriemma publicly reported a malformed packet vulnerability in Open Automation Software’s...

CVE-2012-4871

CVE-2012-4871 affects LiteSpeed Web Server 4.1.11, with an XSS in the administrator panel via the gtitle parameter of service/graph_html.php. The vulnerability allows remote attackers to inject arbitrary web scripts/HTML. Documents do not provide exploitation details or a confirmed patch; remedia...

Fedora Update for perl-YAML-LibYAML FEDORA-2012-4871

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2011-4871

Open Automation Software’s OPC Systems.NET (before version 5.0) is affected by CVE-2011-4871. The issue allows remote attackers to cause a denial of service by sending a malformed .NET RPC packet over TCP port 58723. The vulnerability is exploitable remotely and was publicly reported with PoC cod...

CVE-2012-4871

creationtimestamp| type| source ---|---|--- 2012-03-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37947...

CVE-2011-4871

creationtimestamp| type| source ---|---|--- 2011-10-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/17965...

CVE-2010-4871

CVE-2010-4871 affects SmartFTP prior to 4.0 Build 1142, where an unspecified vulnerability via a long filename is present. The vulnerability is described as having an unknown impact, with CVSSv2 base score 10.0 ( HIGH ). Connected sources consistently reference SmartFTP Client 4.0 and earlier bui...

KLA10330 Vulnerability in SmartFTP

An unspecified vulnerability was found in SmartFTP. By exploiting this vulnerability malicious users can conduct unknown vulnerability. This vulnerability can be exploited via a specially designed filename. Original advisories SmartFTP changelog Related products SmartFTP CVE list CVE-2010-4871...

CVE-2009-4871

CVE-2009-4871 concerns Logoshows BBS 2.0. The flaw is an SQL injection in globepersonnel_forum.asp exploitable via the forumid parameter, potentially allowing remote attackers to execute arbitrary SQL commands. Affected product: Logoshows BBS 2.0 (web interface, globepersonnel_forum.asp). Underly...

CVE-2009-4871

creationtimestamp| type| source ---|---|--- 2009-08-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9389...

CVE-2008-4871

Cross-site scripting XSS vulnerability in My Little Forum 1.75 and 2.0 Beta 23 allows remote attackers to inject arbitrary web script or HTML via BBcode IMG tags...

CVE-2008-4871

CVE-2008-4871 is an XSS vulnerability affecting My Little Forum 1.75 and 2.0 Beta 23, exploitable via BBCode IMG tags to inject arbitrary script/HTML. Affected component is the forum software’s input parsing for BBCode IMG usage; underlying root cause details are not provided in the connected doc...

CVE-2005-4871

IBM DB2 8.1 contains a vulnerability where certain XML functions run with the DB2 process privileges instead of the logged-in user, enabling a remote attacker to create or overwrite files via XMLFileFromVarchar or XMLFileFromClob, or to read files via XMLVarcharFromFile or XMLClobFromFile. The NV...

CVE-2006-4871

SQL injection vulnerability in searchrun.asp in Keyvan1 aka Keyvan Janghorbani EShoppingPro 1.0 allows remote attackers to execute arbitrary SQL commands via the order parameter...

CVE-2006-4871

CVE-2006-4871 is a SQL injection vulnerability in the Keyvan1 EShoppingPro 1.0 product, specifically in search_run.asp. The issue allows remote attackers to modify the underlying SQL logic via the order parameter, potentially enabling arbitrary SQL execution. The available documents identify the ...