CVE-2011-4890

IBM solidDB is affected on affected versions: 6.5 before FP9 and 7.0 before FP1. The issue is a denial-of-service condition where remote authenticated users can crash the daemon by sending a SELECT with a ROWNUM condition that uses a subquery. This is corroborated by multiple sources (OpenVAS/NAS...

CVE-2010-4890

CVE-2010-4890 affects the TYPO3 extension ke_yac (Yet Another Calendar) version prior to 1.1.2. The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The available sources indicate the affected component...

CVE-2009-4890

CVE-2009-4890 describes multiple cross-site scripting (XSS) vulnerabilities in the login application of vBook 4.2.17, allowing remote attackers to inject arbitrary script/HTML via the 1) title and 2) message parameters. The affected product is the login component of vBook; the underlying cause is...

CVE-2008-4890

SQL injection vulnerability in products.php in 1st News 4 Professional PR 1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-4890

creationtimestamp| type| source ---|---|--- 2008-11-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6960...

CVE-2007-4890

CVE-2007-4890 affects the VB To VSI Support Library (VBTOVSI.DLL) 1.0.0.0 within Microsoft Visual Studio 6.0. The vulnerability is an absolute directory traversal in the SaveAs method that allows remote attackers to create or overwrite arbitrary files via a full pathname; the Load method can copy...

CVE-2006-4890

Multiple PHP remote file inclusion vulnerabilities in UNAK-CMS 1.5 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the dirroot parameter to 1 fckeditor/editor/filemanager/browser/default/connectors/php/connector.php or 2 fckeditor/editor/dialog/fcklink.php...

CVE-2006-4890

UNAK-CMS 1.5 and earlier is affected by CVE-2006-4890 and CVE-2008-3568. The vulnerability is an absolute/remote file inclusion in fckeditor/editor/filemanager/browser/default/connectors/php/connector.php (and related fckeditor/editor/dialog/fck_link.php for CVE-2006-4890), where an attacker can ...