CVE-2010-4963

The CVE-2010-4963 issue concerns Hulihan BXR 0.6.8. The vulnerability is a SQL injection in the folder/list endpoint, specifically via the order_by parameter, caused by inadequate input sanitization. An attacker could remotely execute arbitrary SQL commands, potentially reading, modifying, adding...

CVE-2010-4963

creationtimestamp| type| source ---|---|--- 2010-08-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34412...

CVE-2009-4963

CVE-2009-4963 concerns the TYPO3 Commerce extension prior to 0.9.9, where an XSS vulnerability allows authenticated users to inject arbitrary script/HTML via unspecified vectors. The Red Hat/EUVD/GHSA OSV references confirm the same description across multiple sources, but the provided documents ...

CVE-2007-4963

The CVE concerns WinImage 8.10 and earlier, which has a visual truncation vulnerability in filenames inside .IMG or .ISO files. A long sequence of space characters in a destination filename can be used to spoof the target name, and this can be combined with a separate directory traversal vulnerab...

CVE-2006-4963

Exponent CMS 0.96.3 is vulnerable to a local file inclusion (LFI) via the view parameter in the calendarmodule’s show_view action (index.php). The underlying issue is improper handling of ../ sequences that allows remote attackers to read and execute arbitrary local files, demonstrated by PHP cod...