69 matches found
CVE-2012-5181
The CVE-2012-5181 entry concerns a Cross-site scripting (XSS) vulnerability in concrete5. Affected products are concrete5 Japanese versions 5.5.1–5.5.2.1 and concrete5 English versions 5.5.0–5.6.0.2. The root cause is an XSS flaw that allows remote attackers to inject arbitrary script or HTML via...
CVE-2011-5181
CVE-2011-5181 : A cross-site scripting vulnerability exists in the WordPress plugin ClickDesk Live Support – Live Chat 2.0, specifically in the clickdesk.php file where the cdwidgetid parameter is not properly sanitized. This allows remote attackers to inject arbitrary scripts/HTML into pages. Im...
CVE-2010-5181
CVE-2010-5181 : A race condition in VIPRE Antivirus Premium 4.0.3272 for Windows XP lets local users bypass kernel-mode hook handlers and run code that would be blocked by the handler but not by signature-based detection, via certain user-space memory changes during hook-handler execution (KHOBE/...
CVE-2008-5181
CVE-2008-5181 affects Microsoft Communicator. It enables remote attackers to cause a denial of service (application or device outage) by sending instant messages containing large numbers of emoticons. The vulnerability is network-exposed, requires no authentication, and results in partial loss of...
CVE-2007-5181
CVE-2007-5181 : SQL injection in detay.asp of Netkamp Emlak Scripti. The flaw allows remote attackers to execute arbitrary SQL commands via the ilan_id parameter, with reported impacts on confidentiality, integrity, and availability (partial). Base score 7.5 (HIGH) via NVD; no remediation details...
CVE-2006-5181
Multiple PHP remote file inclusion vulnerabilities in Joshua Muheim phpMyWebmin 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the target parameter in 1 changepreferences2.php, 2 createfile.php, 3 uploadlocal.php, and 4 uploadmulti.php, different vectors than CVE-2006-5124...
CVE-2006-5181
Multiple PHP remote file inclusion vulnerabilities in Joshua Muheim phpMyWebmin 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the target parameter in 1 changepreferences2.php, 2 createfile.php, 3 uploadlocal.php, and 4 uploadmulti.php, different vectors than CVE-2006-5124...
CVE-2006-5181
CVE-2006-5181 concerns multiple PHP remote file inclusion vulnerabilities in Joshua Muheim’s phpMyWebmin 1.0. The issues allow an attacker to execute arbitrary PHP code by supplying a URL in the target parameter (in window.php, and possibly in home.php ref targets), with vectors distinct from CVE...