CVE-2011-4898

wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier generates different error messages for requests lacking a dbname parameter depending on whether the MySQL credentials are valid, which makes it easier for remote attackers to conduct brute-force attacks via a...

CVE-2011-4898

wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier generates different error messages for requests lacking a dbname parameter depending on whether the MySQL credentials are valid, which makes it easier for remote attackers to conduct brute-force attacks via a...

CVE-2011-4898

CVE-2011-4898 affects WordPress 3.3.1 and earlier, in wp-admin/setup-config.php. The issue stems from different error messages returned for requests without a dbname depending on MySQL credentials, which can facilitate brute-force attempts by cycling uname/pwd across requests. The connected Nessu...

CVE-2011-4898

wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier generates different error messages for requests lacking a dbname parameter depending on whether the MySQL credentials are valid, which makes it easier for remote attackers to conduct brute-force attacks via a...

CVE-2011-4898

creationtimestamp| type| source ---|---|--- 2012-01-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18417...

CVE-2010-4898

The CVE-2010-4898 entry concerns the Gantry (com_gantry) component for Joomla!, version 3.0.10. The underlying issue is an SQL injection vulnerability in index.php that can be triggered via the moduleid parameter, allowing remote attackers to execute arbitrary SQL commands. The vulnerability is d...

CVE-2009-4898

Cross-site request forgery CSRF vulnerability in TWiki before 4.3.2 allows remote attackers to hijack the authentication of arbitrary users for requests that update pages, as demonstrated by a URL for a save script in the ACTION attribute of a FORM element, in conjunction with a call to the submi...

SOPHIA (Schweiz) AG Protector Default Password (deprecated)

Binary data 4898.prm...

CVE-2008-4898

Cross-site scripting XSS vulnerability in planetluc RateMe 1.3.3 allows remote attackers to inject arbitrary web script or HTML via the rate parameter in a submit rate action...

CVE-2008-4898

CVE-2008-4898 describes an XSS vulnerability in planetluc RateMe 1.3.3 where an attacker can inject arbitrary web script or HTML by supplying a crafted rate parameter in a submit rate action. The affected software is planetluc RateMe 1.3.3; input handling in the rate parameter is the root cause. ...

CVE-2007-4898

Technical details about CVE-2007-4898 are not publicly provided in the supplied documents. Monitor for updates from official advisories; current entries summarize an unspecified vulnerability in XWiki Multiwiki prior to 1.1 Enterprise RC2 without concrete technical specifics.

CVE-2006-4898

GuanxiCRM 0.9.1 and earlier is affected by a PHP remote file inclusion via include/phpxd/phpXD.php. An attacker can supply a URL in appconf[rootpath] to execute arbitrary PHP code. The CVSS metrics (from NVD) indicate high impact with partial confidentiality, integrity, and availability. No remed...