CVE-2010-5048

CVE-2010-5048 concerns a persistent XSS in Joomla! JComments (com_jcomments) admin.jcomments.php v2.1.0.0. The flaw arises from insufficient input sanitization in the POST field named “name,” allowing remote authenticated users to inject arbitrary HTML/JS. The vulnerability affects the JComments ...

CVE-2010-5048

Cross-site scripting XSS vulnerability in admin.jcomments.php in the JoomlaTune JComments comjcomments component 2.1.0.0 for Joomla! allows remote authenticated users to inject arbitrary web script or HTML via the name parameter to index.php...

CVE-2012-5048

creationtimestamp| type| source ---|---|--- 2011-11-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18112...

Toko Lite CMS 1.5.2 (edit.php) HTTP Response Splitting Vulnerability

Summary Toko Web Content Editor cms is a compact, multi language, open source web editor and content management system CMS. It is advanced easy to use yet fully featured program that can be integrated with any existing site. It takes 2 minuets to install even for non technical users. Description...

Toko Lite CMS 1.5.2 - 'edit.php' HTTP Response Splitting

Toko Lite CMS 1.5.2 edit.php HTTP Response Splitting Vulnerability Vendor: Toko Product web page: http://toko-contenteditor.pageil.net Affected version: 1.5.2 Summary: Toko Web Content Editor cms is a compact, multi language, open source web editor and content management system CMS. It is advance...

Toko Lite CMS 1.5.2 HTTP Response Splitting

Toko Lite CMS 1.5.2 edit.php HTTP Response Splitting Vulnerability Vendor: Toko Product web page: http://toko-contenteditor.pageil.net Affected version: 1.5.2 Summary: Toko Web Content Editor cms is a compact, multi language, open source web editor and content management system CMS. It is advance...

Toko Lite CMS 1.5.2 - edit.php HTTP Response Splitting

Toko Lite CMS 1.5.2 - edit.php HTTP Response Splitting Toko Lite CMS 1.5.2 edit.php HTTP Response Splitting Vulnerability Vendor: Toko Product web page: http://toko-contenteditor.pageil.net Affected version: 1.5.2 Summary: Toko Web Content Editor cms is a compact, multi language, open source web...

Toko Lite CMS 1.5.2 (edit.php) HTTP Response Splitting Vulnerability

Exploit for php platform in category web applications Toko Lite CMS 1.5.2 edit.php HTTP Response Splitting Vulnerability Vendor: Toko Product web page: http://toko-contenteditor.pageil.net Affected version: 1.5.2 Summary: Toko Web Content Editor cms is a compact, multi language, open source web...

CVE-2008-5048

CVE-2008-5048 describes a buffer overflow in Atepmon.sys, component of ISecSoft Anti-Trojan Elite, affecting 4.2.1 and earlier (and possibly 4.2.2). The vulnerability is triggered by long inputs to IOCTL 0x00222494, enabling local users to crash the system and potentially execute arbitrary code. ...

CVE-2008-5048

creationtimestamp| type| source ---|---|--- 2008-11-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32572...

Buffer overflow

Buffer overflow in Lhaplus 1.55 and earlier allows remote attackers to execute arbitrary code via a crafted LZH archive, a different vector than CVE-2007-5048...

CVE-2007-6175

Buffer overflow in Lhaplus 1.55 and earlier allows remote attackers to execute arbitrary code via a crafted LZH archive, a different vector than CVE-2007-5048...

CVE-2007-5048

Lhaplus vulnerability (CVE-2007-5048): heap-based buffer overflow in Lhaplus before 1.55 when handling ARJ archives, triggered by a long filename. ARJ filenames can overflow the buffer, allowing remote code execution with the user’s privileges if a crafted file is opened. Affected product: Lhaplu...

CVE-2006-5048

CVE-2006-5048 concerns multiple PHP remote file inclusion vulnerabilities in the Joomla! extension Security Images (com_securityimages) version 3.0.5 and earlier. The underlying flaw is an insecure use of the mosConfig_absolute_path parameter, which allows an attacker to supply a URL to (1) confi...

CVE-2006-5048

Multiple PHP remote file inclusion vulnerabilities in Security Images comsecurityimages component 3.0.5 and earlier for Joomla! allow remote attackers to execute arbitrary code via a URL in the mosConfigabsolutepath parameter in 1 configinsert.php, 2 lang.php, 3 client.php, and 4 server.php...