66 matches found
CVE-2012-5199
CVE-2012-5199 affects HP ArcSight Connector Appliance ≤6.3 and ArcSight Logger ≤5.2. Root cause is an unspecified vulnerability that could allow remote authenticated users to execute arbitrary code via unknown vectors. HP’s security bulletin SSRT101056 indicates remediation by updating to ArcSigh...
CVE-2011-5199
The CVE-2011-5199 entry describes a Cross-site Scripting (XSS) vulnerability in the TinyGuestbook project, specifically in sign.php where the msg parameter can be exploited to inject arbitrary web script or HTML. The available sources consistently identify the vulnerable component as sign.php wit...
CVE-2010-5199
The CVE-2010-5199 entry describes an untrusted search path vulnerability in PhotoImpact X3 13.00.0000.0 that lets local users gain privileges by placing a malicious bwsconst.dll in the current working directory, triggered by a directory containing a .ufp or .ufo file. The root cause is an untrust...
CVE-2008-5199
The CVE-2008-5199 issue affects the PHPOutsourcing IdeaBox (aka IdeBox) 1.1 and constitutes a PHP remote file inclusion vulnerability in include.php, exploitable via a URL in the gorumDir parameter. The underlying vulnerability allows an attacker to cause the remote inclusion of PHP code, which c...
CVE-2006-5199
CVE-2006-5199 affects Adobe Contribute Publishing Server running on Windows. The installation logs may contain the administrator password, enabling a local user to gain privileges to the server and potentially access related resources. The public records in the provided documents confirm the leak...