CVE-2013-5099

creationtimestamp| type| source ---|---|--- 2013-07-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/26958...

CVE-2012-5099

CVE-2012-5099 : A cross-site scripting (XSS) vulnerability exists in list.php for PHPB2B 4.1 and earlier. The flaw allows remote attackers to inject arbitrary web script or HTML through the q parameter in a search action. The connected documents confirm the affected software and the vulnerable pa...

web@all CMS 2.0 SQL Injection

web@all CMS 2.0 order SQL Injection Vulnerability Vendor: web@all Product web page: http://www.webatall.org Affected version: 2.0 Summary: web@all is a PHP content management system CMS. If you know about it,you nearly can use it to do anything. Desc: The application suffers from an SQL Injection...

CVE-2011-5099

The CVE-2011-5099 entry affects Joomla! ccNewsletter (mod_ccnewsletter) in versions 1.0.7–1.0.9. The root cause is a SQL injection in helper/popup.php, enabling remote attackers to inject arbitrary SQL via the id parameter. The description does not specify exploited products beyond this Joomla! e...

CVE-2010-5099

TYPO3 4.2.x (before 4.2.16), 4.3.x (before 4.3.9), and 4.4.x (before 4.4.5) are affected by two related issues: (1) fileDenyPattern in the PHP file inclusion protection API failing to filter file types, enabling access to arbitrary PHP files via path traversal (e.g., with %00). (2) CVE-2010-3714’...

CVE-2011-5099

creationtimestamp| type| source ---|---|--- 2012-04-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37101...

CVE-2009-5099

The Connected documents confirm CVE-2009-5099 affects Pentaho BI Server (1.7.0.1062 and earlier) via a Cross‑Site Scripting vulnerability in the ViewAction component, exploitable through the outputType parameter. Root cause: insufficient input validation/sanitization of the outputType parameter a...

CVE-2009-5099

Cross-site scripting XSS vulnerability in ViewAction in Pentaho BI Server 1.7.0.1062 and earlier allows remote attackers to inject arbitrary web script or HTML via the outputType parameter...

CVE-2008-5099

CVE-2008-5099 affects Sun Logical Domain Manager (LDoms) 1.0–1.0.3. The vulnerability allows local users to read the OBP security-password in cleartext via the improper use of the ldm ls -l command, bypassing SPARC firmware password protection and potentially gaining privileges or data access. Re...

Gentoo Security Advisory GLSA 200609-20 (dokuwiki)

The remote host is missing updates announced in advisory GLSA 200609-20. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD Ports: dokuwiki

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

openSUSE 10 Security Update : xgl (xgl-5099)

This update fixes several integer overflows in Xgl CVE-2007-6429, CVE-2007-1003, CVE-2007-5958, CVE-2007-6427, CVE-2007-6428, CVE-2007-6429, CVE-2008-0006 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

Immunity Canvas: HELPLINK_INCLUDE

Name| helplinkinclude ---|--- CVE| CVE-2007-5099 Exploit Pack| CANVAS Description| HelpLink Remote file inclusion Notes| CVSS: 7.5 Repeatability: Infinite VENDOR: HelpLink CVE Url: https://vulners.com/cve/CVE-2007-5099 CVE Name: CVE-2007-5099...

CVE-2007-5099

CVE-2007-5099 : Affected software is David Watters Helplink 0.1.0. The vulnerability is a PHP remote file inclusion in show.php, exploitable via a URL supplied to the file parameter, allowing an attacker to execute arbitrary PHP code. Connected documents confirm the issue and cite CVSS 7.5; explo...

CVE-2006-5099

lib/exec/fetch.php in DokuWiki before 2006-03-09e, when confimconvert is configured to use ImageMagick, allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 w and 2 h parameters, which are not filtered when invoking convert...