87 matches found
CVE-2010-5194
creationtimestamp| type| source ---|---|--- 2011-11-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18123...
CVE-2008-5194
The provided connected documents confirm a concrete vulnerability: SQL injection in SoftVisions Software Online Booking Manager (obm) 2.2, exploitable through the id parameter in checkavail.php. This allows remote attackers to execute arbitrary SQL commands. The issue is documented across CVE-200...
CVE-2007-5194
The Chroot server in rMake 1.0.11 creates a /dev/zero device file with read/write permissions for the rMake user and the same minor device number as /dev/port, which might allow local users to gain root privileges...
CVE-2007-5194
The CVE-2007-5194 entry concerns the Chroot server in rMake 1.0.11. A local-priority issue arises because it creates a /dev/zero device file with read/write permissions for the rMake user and shares the minor device number with /dev/port, enabling potential local privilege escalation to root. The...
CVE-2006-5194
CVE-2006-5194 is a documented XSS flaw in net2ftp 0.93, specifically in index.php where the username parameter can be exploited to inject arbitrary script/HTML. The vulnerability is described with a CVSS base score of 4.3 (Medium) and a NETWORK attack vector with no authentication required, but o...
