90 matches found
CVE-2010-4944
SQL injection vulnerability in the Elite Experts comeliteexperts component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showExpertProfileDetailed action to index.php...
CVE-2008-4944
writtercontrol in cdcontrol 1.90 allows local users to overwrite arbitrary files via a symlink attack on /tmp/v-recorder-out temporary files...
CVE-2008-4944
writtercontrol in cdcontrol 1.90 allows local users to overwrite arbitrary files via a symlink attack on /tmp/v-recorder-out temporary files...
CVE-2008-4944
CVE-2008-4944 affects writtercontrol in cdcontrol 1.90. The vulnerability arises from a symlink attack on temporary files /tmp/v-recorder*-out, allowing local users to overwrite arbitrary files. The description and multiple references confirm local write access due to improper handling of tempora...
CVE-2007-4944
CVE-2007-4944 affects Opera 9.x before 9.22 on Linux, FreeBSD, and Solaris. The underlying issue is that canvas.createPattern does not clear memory before using it to process a new pattern, which can allow a remote attacker to read memory contents via JavaScript. The vulnerability is described ac...
CVE-2006-4944
PHP remote file inclusion vulnerability in includes/pear/Net/DNS/RR.php in ProgSys 0.151 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpdnsbasedir parameter...
CVE-2006-4944
PHP remote file inclusion vulnerability in includes/pear/Net/DNS/RR.php in ProgSys 0.151 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpdnsbasedir parameter...
CVE-2006-4944
CVE-2006-4944 is a PHP remote file inclusion vulnerability in ProgSys 0.151 and earlier. The flaw exists in includes/pear/Net/DNS/RR.php where an attacker can cause PHP code execution by supplying a crafted URL in the phpdns_basedir parameter. Public references indicate this can enable arbitrary ...
