CVE-2008-4894

CVE-2008-4894 : Tribiq CMS suffers a directory-traversal vulnerability in templates/mytribiqsite/tribal-GPL-1066/includes/header.inc.php. When register_globals is enabled and magic_quotes_gpc is disabled, remote attackers can include and execute arbitrary local files via directory traversal in th...

CVE-2008-4894

creationtimestamp| type| source ---|---|--- 2008-10-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6888...

FreeBSD Ports: wordpress, de-wordpress, zh-wordpress

The remote host is missing an update to the system as announced in the referenced advisory. VID 63347ee7-6841-11dc-82b6-02e0185f8d72 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

DEBIAN-CVE-2007-4894

Multiple SQL injection vulnerabilities in Wordpress before 2.2.3 and Wordpress multi-user MU before 1.2.5a allow remote attackers to execute arbitrary SQL commands via the posttype parameter to the pingback.extensions.getPingbacks method in the XMLRPC interface, and other unspecified parameters...

CVE-2007-4894

CVE-2007-4894 covers multiple SQL injection vulnerabilities in WordPress before 2.2.3 and WordPress MU before 1.2.5a. The issue allows remote attackers to execute arbitrary SQL via the post_type parameter to the pingback.extensions.getPingbacks XML-RPC interface and other parameters related to ea...

CVE-2006-4894

CVE-2006-4894 is an XSS vulnerability in iDevSpot NixieAffiliate (versions 1.9 and earlier), where an attacker can inject arbitrary script via the error parameter in forms/lostpassword.php. The CVE indicates a network-vector, with no authentication required and partial integrity impact. Affected:...