CVE-2014-4740

This CVE entry is rejected/not used; reference CVE-2014-4907 and CVE-2014-4908 instead.

Chrome For Android Bypassing SOP Flaw

CVE Number: CVE-2012-4908 Title: Chrome for Android - Bypassing SOP for Local Files By Symlinks Affected Software: Confirmed on Chrome for Android v18.0.1025123 Credit: Takeshi Terada Issue Status: v18.0.1025308 was released which fixes this vulnerability Overview: Chrome for Android's Same-Origi...

CVE-2012-4908

CVE-2012-4908 affects Google Chrome for Android, where the Same-Origin Policy for local file access (file:) can be bypassed via symbolic links. The vulnerability enables a remote attacker to access Chrome’s private local files (e.g., cookies, bookmarks) by tricking a loaded file: URL with a symli...

CVE-2012-4908

creationtimestamp| type| source ---|---|--- 2012-09-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37795...

CVE-2010-4908

CVE-2010-4908 is a SQL injection vulnerability in Virtue Shopping Mall, specifically in detail.php where the prodid parameter is exploited to inject arbitrary SQL commands. The connected records confirm the vulnerable component and point to remote execution of SQL through the prodid parameter, in...

CVE-2009-4908

CVE-2009-4908 describes multiple cross-site scripting (XSS) vulnerabilities in the oBlog platform. The issues enable remote attackers to inject arbitrary script/HTML via the following parameters: article.php (commentName, commentEmail, commentWeb, commentText); admin/write.php (article_id, title)...

CVE-2009-4908

creationtimestamp| type| source ---|---|--- 2009-12-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10379...

CVE-2011-4908

creationtimestamp| type| source ---|---|--- 2009-07-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9926 2009-07-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9296 2018-05-29 15:50:33+00:00| seen|...

CVE-2008-4908

maps/Info/combine.pl in CrossFire crossfire-maps 1.11.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary file...

CVE-2008-4908

CVE-2008-4908 affects CrossFire’s maps package, specifically maps/Info/combine.pl in crossfire-maps 1.11.0 . The vulnerability is a local-file overwrite through a symlink attack on a temporary file, allowing local users to overwrite arbitrary files. The available connected documents confirm the v...

CVE-2008-4908

maps/Info/combine.pl in CrossFire crossfire-maps 1.11.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary file...

CVE-2008-4908

maps/Info/combine.pl in CrossFire crossfire-maps 1.11.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary file...

CVE-2008-4908

maps/Info/combine.pl in CrossFire crossfire-maps 1.11.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary file...

CVE-2008-4908

maps/Info/combine.pl in CrossFire crossfire-maps 1.11.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary file...

CVE-2007-4908

CVE-2007-4908: Affected software is AuraCMS 2.1 and earlier. The vulnerability is a directory traversal in index.php exploitable via a crafted pilih parameter (.. dot dot), allowing remote inclusion and execution of arbitrary local files. This permits partial impact to confidentiality, integrity,...

CVE-2006-4908

In the provided documents, OSU 3.11alpha and 3.10a are reported vulnerable to information disclosure when a URL contains an asterisk wildcard, which allows remote attackers to view all matching file and directory information. The root cause is exposure of directory listings via unintended wildcar...