68 matches found
CVE-2010-4951
The CVE-2010-4951 issue affects the TYPO3 ecosystem via the xaJax Shoutbox (vx_xajax_shoutbox) extension prior to 1.0.1. According to the provided sources, this is a Cross-site Scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML through unspecified ve...
EGroupware Multiple Vulnerabilities (May 2011) - Active Check
EGroupware is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:egroupware:egroupware";...
CVE-2009-4951
The CVE affects the TYPO3 environment via the ClickStream Analyzer [output] (alternet_csa_out) extension, version 0.3.0 and earlier. The vulnerability is described as unspecified and allows remote attackers to obtain sensitive information through unknown vectors. No concrete root cause, affected ...
CVE-2008-4951
CVE-2008-4951 affects dtc 0.29.6, enabling local users to overwrite arbitrary files through a symlink attack on /tmp/awstats.log, /tmp/spam.log.#####, and /tmp/spam_err.log, related to the accesslog.php and sa-wrapper scripts. The cited sources (NVD, SUSE, Ubuntu, CVE records) confirm the local a...
CVE-2007-4951
CVE-2007-4951 is a PHP remote file inclusion in YaPiG 0.95b (sample.php) allowing arbitrary PHP code execution via a URL in the YAPIG_PATH parameter. The issue is reported as disputed by CVE since YAPIG_PATH is defined before use. No exploitation details are provided in the documents. A remediati...
CVE-2006-4951
Neon WebMail for Java before 5.08 allows remote attackers to execute arbitrary Java JSP code by sending an e-mail message with a JSP file attachment, which is stored under the web root with a predictable filename...
CVE-2006-4951
Neon WebMail for Java before 5.08 is vulnerable to remote code execution: an attacker can send an email containing a JSP attachment that is stored under the web root with a predictable filename, allowing execution of arbitrary Java (JSP) code on the server. The affected component is Neon WebMail ...