76 matches found
Chrome For Android Download Function Information Disclosure
CVE Number: CVE-2012-4906 Title: Chrome for Android - Download Function Information Disclosure Affected Software: Confirmed on Chrome for Android v18.0.1025123 Credit: Takeshi Terada Issue Status: v18.0.1025308 was released which fixes this vulnerability Overview: Rogue Android apps can steal...
CVE-2012-4906
Google Chrome for Android prior to version 18.0.1025308 is affected by CVE-2012-4906, where improper restriction of file: URLs allows remote attackers to obtain sensitive information via unspecified vectors (demonstrated by credential data access). The issue is distinct from CVE-2012-4903 and was...
CVE-2012-4906
Removed by vendor...
CVE-2010-4906
SQL injection vulnerability in zp-core/full-image.php in Zenphoto 1.3 and 1.3.1.2 allows remote attackers to execute arbitrary SQL commands via the a parameter. NOTE: some of these details are obtained from third party information...
CVE-2010-4906
CVE-2010-4906 concerns SQL injection in Zenphoto before and including 1.3.1.2 via zp-core/full-image.php when processing the parameter a. Affected product: Zenphoto 1.3 and 1.3.1.2. Root cause: unsafely constructed SQL in the mentioned script enables remote attackers to execute arbitrary SQL comm...
CVE-2010-4906
creationtimestamp| type| source ---|---|--- 2010-09-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34610...
CVE-2009-4906
Cross-site request forgery CSRF vulnerability in index.php in Acc PHP eMail 1.1 allows remote attackers to hijack the authentication of administrators for requests that change passwords...
CVE-2009-4906
CVE-2009-4906 is a CSRF vulnerability affecting Acc PHP eMail 1.1 (index.php). The issue allows remote attackers to hijack administrator authentication for requests that change passwords. Connected sources provide the same description across multiple feeds; CVSS2 base score is 6.8 (Medium) with n...
CVE-2008-4906
CVE-2008-4906 describes an SQL injection in the Lyrics (lyrics_menu) plugin for e107, version 0.42, where the l_id parameter enables remote attackers to execute arbitrary SQL commands. This is a high-severity issue (CVSS v2 base score 7.5). The provided documents confirm the vulnerable component ...
CVE-2008-4906
creationtimestamp| type| source ---|---|--- 2008-10-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6885...
QuickTime Player 7.3.1.70 - RTSP Remote Buffer Overflow
QuickTime Player 7.3.1.70 - RTSP Remote Buffer Overflow Quicktime Player 7.3.1.70 rtsp Remote Buffer Overflow Exploit PoC https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/4906.zip 2008-quicktimebof.zip milw0rm.com 2008-01-14...
QuickTime Player 7.3.1.70 - 'RTSP' Remote Buffer Overflow
Quicktime Player 7.3.1.70 rtsp Remote Buffer Overflow Exploit PoC https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/4906.zip 2008-quicktimebof.zip milw0rm.com 2008-01-14...
Immunity Canvas: NUCLEARBB_INCLUDE
Name| nuclearbbinclude ---|--- CVE| CVE-2007-4906 Exploit Pack| CANVAS Description| NuclearBB Alpha 2 Remote file inclusion Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: nuclearbb.com CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4906 CVE Name: CVE-2007-4906...
CVE-2007-4906
CVE-2007-4906 affects NuclearBB Alpha 2 and its file tasks/send_queued_emails.php . The vulnerability is a PHP remote file inclusion triggered when register_globals is enabled, allowing an attacker to execute arbitrary PHP code by supplying a URL in the root_path parameter. The connected document...
CVE-2006-4906
The CVE-2006-4906 entry documents a SQL injection in More.groupware 0.74, specifically in modules/calendar/week.php where the new_calendarid parameter can be exploited to execute arbitrary SQL commands. Affected component: More.groupware 0.74 (calendar module). Root cause: unsanitized input in ne...
