CVE-2013-4955

CVE-2013-4955: Puppet Enterprise before 3.0.1 contains an open redirect in the login page via a URL in the service parameter, enabling attackers to redirect users to arbitrary sites and facilitate phishing. Impact is a web-redirect vuln; no exploit details provided. Mitigation: upgrade Puppet Ent...

CVE-2013-4955

Open redirect vulnerability in the login page in Puppet Enterprise before 3.0.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the service parameter...

CVE-2012-4955

Dell OpenManage Server Administrator (OMSA) prior to 6.5.0.1, 7.0 prior to 7.0.0.1, and 7.1 prior to 7.1.0.1 contains a cross-site scripting (XSS) vulnerability. The Nessus entry specifies DOM-based XSS in omalogin.html and mentions a related vector in omatasks.html, enabling remote attackers to ...

CVE-2010-4955

SQL injection vulnerability in board/board.php in APBoard Developers APBoard 2.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2006-3078...

CVE-2010-4955

CVE-2010-4955 describes a SQL injection vulnerability in the APBoard product. The flaw resides in the file board/board.php and affects APBoard 2.1.0 and earlier. Remote attackers can leverage the id parameter to execute arbitrary SQL commands. This represents a distinct vector from CVE-2006-3078....

CVE-2010-4955

SQL injection vulnerability in board/board.php in APBoard Developers APBoard 2.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2006-3078...

CVE-2009-4955

SQL injection vulnerability in the ultraCards thultracards extension before 0.5.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2009-4955

The CVE-2009-4955 issue is a SQL injection vulnerability in the ultraCards (th_ultracards) TYPO3 extension, affected before version 0.5.1. The underlying flaw permits remote attackers to execute arbitrary SQL commands via unspecified vectors. A fixed release is 0.5.1; applying that version (or pa...

openSUSE 10 Security Update : postgresql (postgresql-4955)

This version update to 8.2.6 fixes among other things several security issues : - Index Functions Privilege Escalation: CVE-2007-6600 - Regular Expression Denial-of-Service: CVE-2007-4772, CVE-2007-6067, CVE-2007-4769 - DBLink Privilege Escalation: CVE-2007-6601 %NASLMINLEVEL 70300 C Tenable...

Immunity Canvas: JOOMLAFLASHFUN_INCLUDE

Name| joomlaflashfuninclude ---|--- CVE| CVE-2007-4955 Exploit Pack| CANVAS Description| Joomla Flashfun Component Remote File Inclusion Notes| CVE Name: CVE-2007-4955 VENDOR: Joomla Repeatability: Infinite References: http://secunia.com/advisories/26799/ CVE Url:...

CVE-2007-4955

The CVE-2007-4955 entry describes a PHP remote file inclusion vulnerability in the Joomla! Flash Fun! extension (com_joomlaflashfun) version 1.0. The issue allows an attacker to remotely execute arbitrary PHP code by supplying a URL in the mosConfig_live_site parameter within admin.joomlaflashfun...

CVE-2006-4955

CVE-2006-4955 concerns a directory traversal vulnerability in the Neon WebMail for Java downloadfile servlet. The flaw allows remote attackers to read arbitrary files via a .. sequence in the (1) savefolder and (2) savefilename parameters, affecting Neon WebMail for Java prior to version 5.08. Th...