65 matches found
CVE-2008-4922
CVE-2008-4922 describes a buffer overflow in the DjVu ActiveX Control 3.0 for Microsoft Office (DjVu_ActiveX_MSOffice.dll). An overly long string to the ImageURL() property (and possibly the Mode, Page, or Zoom properties) can allow remote code execution. The connected sources confirm the affecte...
CVE-2008-4922
creationtimestamp| type| source ---|---|--- 2008-10-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6878 2010-09-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16638 2018-05-29 15:50:33+00:00| seen|...
CVE-2007-4922
CVE-2007-4922 describes an SQL injection in the jeuxflash 1.0 module for KwsPHP. The vulnerability is in play.php (remote authenticated users) allowing arbitrary SQL execution via the id parameter in a play ac action to index.php. The description notes third-party details were used. Connected rec...
CVE-2006-4922
CVE-2006-4922 describes an unrestricted file upload in Site@School (S@S) 2.4.02 and earlier, specifically in starnet/editors/htmlarea/popups/images.php. The vulnerability enables remote attackers to upload and execute arbitrary files with executable extensions. The available documents identify th...
