CVE-2013-4957

The CVE affects Puppet Enterprise prior to 3.0.1, where the dashboard report handling allows an attacker to execute arbitrary YAML code through a crafted report-specific type. The root cause is processing of the report-specific type in the dashboard/report generation flow, enabling code execution...

Novell File Reporter SRS Arbitrary File Retrieval (CVE-2012-4957)

A file retrieval vulnerability has been reported in Novell File Reporter. The vulnerability is due to lack of authorization on certain requests. A remote attacker can exploit this issue by sending a specially crafted request to the affected service. Successful exploitation could result in arbitra...

NFR Agent SRS Record Arbitrary Remote File Access

NFRAgent.exe, a component of Novell File Reporter NFR, allows remote attackers to retrieve arbitrary files via a request to /FSF/CMD with a SRS Record with OPERATION 4 and CMD 103, specifying a full pathname. This module has been tested successfully against NFR Agent 1.0.4.3 File Reporter 1.0.2 a...

CVE-2011-4957

The vulnerability CVE-2011-4957 affects WordPress prior to 3.1.1, involving the make_clickable function in wp-includes/formatting.php. The root cause is improper URL checking before passing to the PCRE library, enabling a crafted URL in a comment to trigger many recursive calls and cause a denial...

CVE-2010-4957

CVE-2010-4957 affects the TYPO3 ke_questionnaire extension prior to version 2.2.3. The vulnerability is a SQL injection in the extension that allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Root cause details are limited to the generic SQL injection description ...

CVE-2009-4957

CVE-2009-4957 describes a directory-traversal vulnerability in Interspire ActiveKB (affects loadpanel.php) that allows remote attackers to read arbitrary files via directory traversal in the Panel parameter. The vulnerability is referenced in multiple sources (NVD entry with a CVSSv2 base score o...

CVE-2009-4957

Directory traversal vulnerability in loadpanel.php in Interspire ActiveKB allows remote attackers to read arbitrary files and possibly have unspecified other impact via directory traversal sequences in the Panel parameter...

Kitware GCC-XML 'find_flags'脚本不安全临时文件建立漏洞

Bugraq ID: 36318 CVE ID： CVE-2008-4957 GCC-XML是一款c++语法分析器,是gcc编译器的前端。 Kitware GCC-XML 'findflags'脚本在/tmp中不安全建立临时文件，本地攻击者可以利用漏洞通过符号链接覆盖系统中任意文件。 Kitware GCC-XML 0.9 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496391...

CVE-2009-4957

creationtimestamp| type| source ---|---|--- 2009-04-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8346...

PostgreSQL Error Message Conversion Remote DoS

Binary data 4957.prm...

CVE-2008-4957

findflags in Kitware GCC-XML gccxml 0.9.0 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.cxx temporary file...

CVE-2008-4957

CVE-2008-4957 affects Kitware GCC-XML (gccxml) 0.9.0. The vulnerability arises from insecure temporary file handling in the find_flags routine, which creates/opens a file under /tmp/*.cxx in a way that allows a local attacker to exploit a symlink and overwrite arbitrary files. Impact: potential c...

CVE-2007-4957

CVE-2007-4957 concerns a vulnerability in Chupix CMS 0.2.3 where download.php is susceptible to multiple directory traversal flaws. An attacker can cause the application to read or overwrite arbitrary files by supplying a leading “..” in the parameters (1) fichier or (2) repertoire, or to create ...

CVE-2006-4957

CVE-2006-4957 corresponds to a SQL injection in MyReview 1.9.4. The GetMember function in functions.php fails to sanitize the email parameter used by Admin.php, enabling remote attackers to execute arbitrary SQL. Exploitation details are supported by multiple sources (NVD/Nessus references). The ...