134 matches found
UnrealIRCd Buffer Overflow Vulnerability
UnrealIRCd is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:unrealircd:unrealircd";...
CVE-2009-4893
UnrealIRCd is affected by CVE-2009-4893 in versions 3.2beta11 through 3.2.8 where the vulnerability is a buffer overflow in the user authentication path when the noident option is enabled. The impact described in the sources is that a remote attacker can crash the server and may potentially execu...
CVE-2008-4893
Affected software: Tribiq CMS 5.0.10a. Vulnerable component: templates/mytribiqsite/tribal-GPL-1066/includes/header.inc.php. Root cause: cross-site scripting when register_globals is enabled, via the template_path parameter. Impact: remote attackers can inject arbitrary web script or HTML. Exploi...
CVE-2008-4893
Cross-site scripting XSS vulnerability in templates/mytribiqsite/tribal-GPL-1066/includes/header.inc.php in Tribiq CMS 5.0.10a, when registerglobals is enabled, allows remote attackers to inject arbitrary web script or HTML via the templatepath parameter. NOTE: the provenance of this information ...
CVE-2008-4893
creationtimestamp| type| source ---|---|--- 2008-10-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6888...
CVE-2007-4893
wp-admin/admin-functions.php in Wordpress before 2.2.3 and Wordpress multi-user MU before 1.2.5a does not properly verify the unfilteredhtml privilege, which allows remote attackers to conduct cross-site scripting XSS attacks via modified data to 1 post.php or 2 page.php with a nofilter field...
CVE-2007-4893
wp-admin/admin-functions.php in Wordpress before 2.2.3 and Wordpress multi-user MU before 1.2.5a does not properly verify the unfilteredhtml privilege, which allows remote attackers to conduct cross-site scripting XSS attacks via modified data to 1 post.php or 2 page.php with a nofilter field...
CVE-2007-4893
CVE-2007-4893 affects WordPress before 2.2.3 and WordPress MU before 1.2.5a, where unfiltered_html privilege is not properly verified, enabling cross-site scripting via modified data to post.php or page.php with a no_filter field. Exploitation details and affected versions are corroborated by mul...
CVE-2007-4893
wp-admin/admin-functions.php in Wordpress before 2.2.3 and Wordpress multi-user MU before 1.2.5a does not properly verify the unfilteredhtml privilege, which allows remote attackers to conduct cross-site scripting XSS attacks via modified data to 1 post.php or 2 page.php with a nofilter field...
CVE-2006-7148
PHP remote file inclusion vulnerability in includes/bbusagestats.php in maluinfo 206.2.38 for Brazilian PHPBB allows remote attackers to execute arbitrary PHP code via the phpbbrootpath parameter. NOTE: this might be the same issues as CVE-2006-4893...
CVE-2006-4893
PHP remote file inclusion vulnerability in bbusagestats/includes/bbusagestats.php in phpBB XS 0.58 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter, a different vector than CVE-2006-4780...
CVE-2006-4893
CVE-2006-4893 impacts the phpBB XS project (v0.58 and earlier). The vulnerable component is the file system access in the bb_usage_stats.php (path: bb_usage_stats/includes/bb_usage_stats.php) where a PHP remote file inclusion flaw allows an attacker to supply a URL via the phpbb_root_path paramet...
CVE-2006-4893
PHP remote file inclusion vulnerability in bbusagestats/includes/bbusagestats.php in phpBB XS 0.58 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter, a different vector than CVE-2006-4780...