90 matches found
CVE-2012-4975
editrequestuser.asp in Layton Helpbox 4.4.0 allows remote authenticated users to change arbitrary support-ticket data via a modified sysrequestid parameter...
CVE-2012-4975
CVE-2012-4975 affects Layton Helpbox 4.4.0. An authorization bypass exists on editrequestuser.asp: by changing the sys_request_id parameter, a remote authenticated attacker can access and modify other users’ support-ticket data, effectively logging in as another user and altering data. The descri...
Layton Helpbox 4.4.0 Authorization Bypass
Layton Helpbox 4.4.0 Authorisation Bypass Vulnerability by Joseph Sheridan Summary Layton Technologies Helpbox product version 4.4.0 is vulnerable to an authorisation bypass vulnerability. CVE number: CVE-2012-4975 Impact: Medium Vendor homepage: http://www.laytontechnology.com Vendor notified:...
CVE-2010-4975
SQL injection vulnerability in the Techjoomla SocialAds For JomSocial comsocialads component for Joomla! allows remote attackers to execute arbitrary SQL commands via the ads description field in a showad action to index.php...
CVE-2009-4975
Cross-site scripting XSS vulnerability in webview.cpp in QtDemoBrowser allows remote attackers to inject arbitrary web script or HTML via a URL associated with a nonexistent domain name, related to a "universal XSS" issue, a similar vulnerability to CVE-2010-2536...
CVE-2009-4975
Technical details (affected products, root cause, exploitability or patch information) are not publicly available in the provided documents; monitor for updates.
CVE-2008-4975
The CVE-2008-4975 entry concerns mkmailpost in newsgate 1.6, where a symlink attack on a /tmp/mmp##### temporary file allows local users to overwrite arbitrary files. The root cause is a symlink-based file overwrite vulnerability in the mkmailpost routine, enabling local privilege impact (complet...
CVE-2007-4975
Cross-site scripting XSS vulnerability in hilfe.php in b1gMail 6.3.1 allows remote attackers to inject arbitrary web script or HTML via the chapter parameter...
CVE-2007-4975
The cited CVE-2007-4975 describes a Cross-site Scripting (XSS) vulnerability in hilfe.php of b1gMail 6.3.1, where an attacker can inject arbitrary script/HTML via the chapter parameter. Affected product appears to be b1gMail 6.3.1, with the vulnerable component/function being hilfe.php. The publi...
