KLA10394 Multiple vulnerabilities in Siemens

Multiple critical vulnerabilities have been found in Siemens products. Malicious users can exploit these vulnerabilities to read & modify arbitrary files, cause denial of service, execute arbitrary code, bypass authentication, obtain access and inject arbitrary HTTP headers. Below is a complete...

CVE-2011-4876

creationtimestamp| type| source ---|---|--- 2011-11-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18166...

CVE-2010-4876

The connected documents confirm a concrete vulnerability: CVE-2010-4876 is a SQL injection in viewpost.php of mBlogger 1.0.04, exploitable via the postID parameter to execute arbitrary SQL commands. This is a remote, network-accessible flaw with a CVSS v2 base score of 7.5 (HIGH), and the provide...

CVE-2010-4876

creationtimestamp| type| source ---|---|--- 2010-08-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14849...

CVE-2009-4876

CVE-2009-4876 affects Netrix CMS 1.0, where admin/cikkform.php can be abused to modify arbitrary pages via a direct request using the cid parameter. The vulnerability allows remote modification without authentication according to the description. No exploitation details or patch information are p...

CVE-2009-4876

creationtimestamp| type| source ---|---|--- 2009-07-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9203...

CVE-2008-4876

The CVE-2008-4876 entry concerns an XSS vulnerability in the web server component of Philips Electronics VOIP841 DECT Phone. Affected firmware versions 1.0.4.50 and 1.0.4.80 allow remote attackers to inject arbitrary web script or HTML via the request URL because it is not properly sanitized in t...

CVE-2005-4876

The CVE describes an XSS in Openfire’s admin console login.jsp. Affected: Openfire (Wildfire) 2.2.2, and possibly earlier than 2.3.0 Beta 2. The vulnerability arises from improper handling of the username parameter, allowing remote attackers to inject arbitrary script/HTML. This is a component-le...