CVE-2011-5115

Cross-site scripting XSS vulnerability in DLGuard, possibly 4.6 and earlier, allows remote attackers to inject arbitrary web script or HTML via the searchCart parameter to index.php...

CVE-2011-5115

DLGuard is affected by an XSS vulnerability (likely in version 4.6 and earlier) that can be triggered via the searchCart parameter to index.php. The root cause is insufficient input sanitization, allowing injection of arbitrary scripts/HTML. OpenVAS notes the vulnerability with a WillNotFix remed...

CVE-2009-5115

CVE-2009-5115 affects McAfee CMA 3.5.5 (3.5.5.588) and 3.6.0 (3.6.0.608), and McAfee Agent 4.0 prior to Patch 3. An authenticated remote attacker could overwrite arbitrary files by accessing a report-writing ActiveX control COM object. Remediation: apply Patch 3 for McAfee Agent 4.0 (and correspo...

Code injection

Cisco Unified Videoconferencing UVC System 5110 and 5115, when the Linux operating system is used, uses world-readable permissions for the /etc/shadow file, which allows local users to discover encrypted passwords by reading this file, aka Bug ID CSCti54043...

CVE-2010-4303

CVE-2010-4303 affects Cisco Unified Videoconferencing (UVC) System 5110 and 5115 when running Linux. The root cause described in the sources is that /etc/shadow is world-readable, enabling local users to read encrypted password hashes. This is a local disclosure vulnerability as stated. The conne...

CVE-2010-3037

CVE-2010-3037 affects Cisco Unified Videoconferencing (UVC) products (5110/5115 Linux; 3545, 5230 VxWorks; 3527 PRI Gateway; 3522 BRI Gateway; 3515 MCU). The flaw is a remote command-injection in the web interface via the /goform/websXMLAdminRequestCgi.cgi, allowing an authenticated administrator...

CVE-2008-5115

Cross-site request forgery CSRF vulnerability in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attackers to hijack the authentication of administrators for requests that update the password via idm/admin/changeself.jsp...

CVE-2008-5115

creationtimestamp| type| source ---|---|--- 2008-11-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32579...

SuSE 10 Security Update : CUPS (ZYPP Patch Number 5115)

specially crafted GIF files could cause a buffer overflow in the printer filter for image files. CVE-2008-1373 - specially crafted files could cause a buffer overflow in the HP-GL/2 printer filter. CVE-2008-0053 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this...

CVE-2007-5115

CVE-2007-5115 describes multiple PHP remote file inclusion vulnerabilities in Ekke Doerre Contenido 42VariablVersion (42VV10) used with contenido_hacks in Mods 4 Xoops Contenido eZ publish (pdf4cms). The flaw allows an attacker to force the inclusion of remote PHP code by supplying a URL in param...

CVE-2006-5115

Directory traversal vulnerability in kgcall.php in KGB 1.87 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the engine parameter, as demonstrated by uploading a file containing PHP code with an image/jpeg content type, and then referencing this file throug...