88 matches found
CVE-2009-4954
CVE-2009-4954 describes an SQL injection in the TYPO3 VCE plug-in Versatile Calendar Extension (sk_calendar) before version 0.3.4. Affected software: TYPO3 environment using sk_calendar prior to 0.3.4. Root cause: improper handling of input in the extension, enabling an attacker to inject arbitra...
CVE-2008-4954
mead.pl in fml 4.0.3 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/debugbuf temporary file...
CVE-2008-4954
CVE-2008-4954 affects mead.pl in fml 4.0.3. The issue arises from a symlink attack on the /tmp/debugbuf temporary file, enabling local users to overwrite arbitrary files. The connected records corroborate the vulnerability description but do not provide exploit code, affected versions beyond the ...
Immunity Canvas: JOOMLA12PIC_INCLUDE
Name| joomla12picinclude ---|--- CVE| CVE-2007-4954 Exploit Pack| CANVAS Description| Joomla 12pic Component Remote File Inclusion Notes| CVE Name: CVE-2007-4954 VENDOR: Joomla Repeatability: Infinite References: http://securityreason.pl/exploitalert/2780 CVE Url:...
CVE-2007-4954
CVE-2007-4954 describes a PHP remote file inclusion in the Joomla! 1.0 extension joom12Pic (com_joom12pic), specifically via the mosConfig_live_site parameter in admin.joom12pic.php. The vulnerability allows an attacker to supply a crafted URL and potentially execute arbitrary PHP code on the ser...
CVE-2006-4954
The CVE relates to the updateuser servlet in Neon WebMail for Java prior to 5.08, which does not validate the in_id parameter. This vulnerability allows remote attackers to modify information of arbitrary users (e.g., passwords, permissions, profile settings, and creating/deleting users). The iss...
