CVE-2014-5203

wp-includes/class-wp-customize-widgets.php in the widget implementation in WordPress 3.9.x before 3.9.2 might allow remote attackers to execute arbitrary code via crafted serialized data...

CVE-2014-5203

CVE-2014-5203 affects WordPress 3.9.x before 3.9.2, where the widget implementation in wp-includes/class-wp-customize-widgets.php can be triggered to execute arbitrary code via crafted serialized data. The NVD/NVИ records show a high severity (base score 7.5) with network exploitability and no au...

CVE-2014-5203

wp-includes/class-wp-customize-widgets.php in the widget implementation in WordPress 3.9.x before 3.9.2 might allow remote attackers to execute arbitrary code via crafted serialized data...

HP Intelligent Management ReportImgServlt Directory Traversal

This module exploits a lack of authentication and a directory traversal in HP Intelligent Management, specifically in the ReportImgServlt, in order to retrieve arbitrary files with SYSTEM privileges. This module has been tested successfully on HP Intelligent Management Center 5.1 E0202 over Windo...

HP Intelligent Management Center < 5.2 E401 Multiple Vulnerabilities

The version of HP Intelligent Management Center running on the remote host is potentially affected by multiple vulnerabilities : - A cross-site scripting vulnerability exists in the 'opentoposymbolid' parameter of the 'topoContent.jsf' script. CVE-2012-5200 - Multiple code execution vulnerabiliti...

CVE-2012-5203

CVE-2012-5203 in HP Intelligent Management Center (iMC) and iMC for ANM (pre-5.2 E0401) is an information-disclosure vulnerability exploitable via a ReportImgServlet directory-traversal. The issue arises from lack of authentication and insufficient input validation in ReportImgServlet when proces...

CVE-2011-5203

CVE-2011-5203 concerns a SQL injection in Akiva WebBoard’s WB/Default.asp before version 8 SR 1, exploitable remotely via the name parameter. Affected component is WebBoard’s server-side script; underlying issue is improper input handling enabling arbitrary SQL execution. NVD reports a CVSS v2 ba...

CVE-2010-5203

CVE-2010-5203 affects NCP Secure Enterprise Client before 9.21 Build 68, Secure Entry Client before 9.23 Build 18, and Secure Client – Juniper Edition before 9.23 Build 18. The issue is an untrusted search path privilege escalation where local users can gain privileges via Trojan horse files in t...

CVE-2011-5203

creationtimestamp| type| source ---|---|--- 2011-12-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18293...

GtekClient Detection

Binary data 5203.prm...

CVE-2008-5203

PowerAward 1.1.0 RC1 contains a Cross-site Scripting (XSS) vulnerability in external_vote.php. The issue is exploitable via the l_vote_done parameter, allowing remote attackers to inject arbitrary web script or HTML. Documents consistently describe the affected component and payload, but do not p...

CVE-2008-5203

creationtimestamp| type| source ---|---|--- 2008-06-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5962...

CVE-2006-5203

CVE-2006-5203 affects Invision Power Board (IPB) 2.1.7 and earlier . A remote attacker with restricted admin rights can cause arbitrary web script/HTML or SQL commands to execute by supplying a crafted image containing PHP code in a forum description. The exploit triggers when a user visits the M...