110 matches found
CVE-2015-4913
CVE-2015-4913 affects Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier. It is a remote authenticated vulnerability exposing availability via DML-related vectors (un disclosed). Root cause is unspecified in the provided description; no specific fixes or patch versions are listed. It i...
CVE-2015-4913
Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via vectors related to Server : DML, a different vulnerability than CVE-2015-4858...
CVE-2010-4913
The OpenVAS entry confirms that ColdGen ColdUserGroup is prone to both Cross-Site Scripting (XSS) and SQL Injection vulnerabilities. The CVE-2010-4913 entry describes an XSS flaw in the search feature of ColdGen ColdUserGroup 1.06, exploitable via the Keywords parameter to inject arbitrary script...
SuSE 11.1 Security Update : compat-openssl097g (SAT Patch Number 4913)
This update adds openssl patches since 2007 for : - CVE-2009-0590 - CVE-2008-5077 - CVE-2009-0789 - CVE-2009-3555 - CVE-2010-4180 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text...
CVE-2009-4913
Cisco ASA 5580 series devices running software before 8.1(2) have an IPv6 implementation issue (Bug CSCso58622) that exposes IP services on the far side of the box, potentially allowing remote attackers to bypass access restrictions via IPv6 packets. Affected product/component: Cisco ASA 5580; vu...
CVE-2008-4913
CVE-2008-4913: LokiCMS (versions 0.3.3 and earlier) contains a directory traversal flaw in admin.php where an attacker can use a .. in the delete parameter to delete arbitrary files. The connected documents confirm the affected product/version and the underlying cause (directory traversal) but do...
CVE-2007-4913
ipskernel/classupload.php in Invision Power Board IPB or IP.Board 2.3.1 up to 20070912 allows remote attackers to upload arbitrary script files with crafted image filenames to uploads/, where they are saved with a .txt extension and are not executable. NOTE: there are limited usage scenarios unde...
CVE-2007-4913
CVE-2007-4913 concerns Invision Power Board (IPB/IP.Board) 2.3.1 up to 20070912. The vulnerability lies in ips_kernel/class_upload.php, where remote attackers can upload arbitrary script files using crafted image filenames to the uploads/ directory. The uploaded files are saved with a .txt extens...
CVE-2006-4913
The CVE-2006-4913 entry describes a directory traversal in AlstraSoft E-friends 4.85 (chat/getStartOptions.php). An attacker can cause local file inclusion and potentially execute code by supplying a .. sequence and a trailing null (%00) byte in the lang parameter, demonstrated by injecting PHP i...
