98 matches found
Microsoft Releases Security Advisory for Internet Explorer
Microsoft has released Security Advisory 2757760 to address a vulnerability in Microsoft Internet Explorer 6, 7 , 8, and 9. This vulnerability may allow an attacker to execute arbitrary code if a user accesses specially crafted HTML documents e.g., a web page or an HTML email message or attachmen...
Immunity Canvas: IE_EXECCOMMAND
Name| ieexecCommand ---|--- CVE| CVE-2012-4969 Exploit Pack| CANVAS Description| ieexecCommand Notes| CVE Name: CVE-2012-4969 VENDOR: Microsoft Notes: VersionsAffected: Repeatability: Infinite References: 'http://technet.microsoft.com/en-us/security/advisory/2757760' Date public: 09/17/2012 MSADV...
CVE-2012-4969
Use-after-free vulnerability in the CMshtmlEd::Exec function in mshtml.dll in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code via a crafted web site, as exploited in the wild in September 2012...
CVE-2012-4969
The CVE-2012-4969 issue is a use-after-free in the CMshtmlEd::Exec function of mshtml.dll used by Microsoft Internet Explorer (IE6–IE9 according to the CVE payload). Exploitation enabled remote code execution via a crafted website; the vulnerability was observed in the wild around September 2012....
Microsoft Internet Explorer Remote Code Execution Vulnerability (2757760)
This host is missing a critical security update according to Microsoft Bulletin MS12-063. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2012-4969
Use-after-free vulnerability in the CMshtmlEd::Exec function in mshtml.dll in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code via a crafted web site, as exploited in the wild in September 2012. Recent assessments: Assessed Attacker Value: 0 Assessed...
CVE-2010-4969
SQL injection vulnerability in articlesdetails.php in BrotherScripts BS Business Directory allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2010-4969
CVE-2010-4969 refers to a SQL injection in articlesdetails.php of BrotherScripts (BS) Business Directory. The underlying flaw allows remote attackers to inject arbitrary SQL via the id parameter, potentially compromising data confidentiality and integrity. The NVD metrics indicate a CVSS v2 base ...
Exponent CMS 0.97 Cross Site Scripting / File Disclosure / Local File Inclusion / Shell Upload
Exponent CMS v0.97 Multiple Vulnerabilities Vendor: OIC Group Inc. Product web page: http://www.exponentcms.org Affected version: 0.97 Summary: Open Source Content Management System PHP+MySQL. Desc: Exponent CMS suffers from multiple vulnerabilities: 1. Local File Inclusion / File Disclosure...
Exponent CMS v0.97 Multiple Vulnerabilities
Exploit for php platform in category web applications =========================================== Exponent CMS v0.97 Multiple Vulnerabilities =========================================== Vendor: OIC Group Inc. Product web page: http://www.exponentcms.org Affected version: 0.97 Summary: Open Source...
Exponent CMS 0.97 - Multiple Vulnerabilities
Exponent CMS 0.97 - Multiple Vulnerabilities Exponent CMS v0.97 Multiple Vulnerabilities Vendor: OIC Group Inc. Product web page: http://www.exponentcms.org Affected version: 0.97 Summary: Open Source Content Management System PHP+MySQL. Desc: Exponent CMS suffers from multiple vulnerabilities: 1...
CVE-2009-4969
The CVE-2009-4969 entry concerns SQL injection in the Solidbase Bannermanagement (SBbanner) extension 1.0.1 for TYPO3, allowing remote attackers to execute arbitrary SQL via unspecified vectors. Multiple sources (NVD, Red Hat, CVE listings) consistently identify the affected component as SBbanner...
CVE-2010-4969
creationtimestamp| type| source ---|---|--- 2010-07-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14241...
CVE-2008-4969
The CVE-2008-4969 issue affects ltp-network-test 20060918, where local users can overwrite arbitrary files via a symlink attack on multiple /tmp paths (including /tmp/vsftpd.conf and several /tmp/nfs_fsstress.*.log/.sardata files) linked to the scripts ftp_setup_vsftp_conf and nfs_fsstress.sh. Th...
CVE-2007-4969
CVE-2007-4969 affects Process Monitor 1.22. The vulnerability stems from improper validation of parameters to System Service Descriptor Table (SSDT) function handlers, enabling local users to crash the system and potentially gain privileges via unspecified kernel SSDT hooks for Windows Native API...
CVE-2006-4969
Multiple PHP remote file inclusion vulnerabilities in WAHM E-Commerce Pie Cart Pro allow remote attackers to execute arbitrary PHP code via a URL in the IncDir parameter in 1 affiliates.php, 2 orders.php, 3 events.php, 4 index.php, 5 articles.php, 6 faqs.php, 7 guestbook.php, 8 catalog.php, 9...
CVE-2006-4969
CVE-2006-4969 refers to multiple PHP remote file inclusion vulnerabilities in the WAHM E-Commerce Pie Cart Pro. The issue allows an attacker to cause arbitrary PHP code execution by supplying a URL in the Inc_Dir parameter across numerous PHP files (e.g., affiliates.php, orders.php, events.php, i...
