CVE-2011-5221

CVE-2011-5221 affects WebSVN (before 2.3.1). The vulnerability is a cross-site scripting (XSS) in the getLog function of svnlook.php, allowing an attacker to inject arbitrary web script or HTML via the path parameter to comp.php, diff.php, or revision.php. Impact: client-side script execution in ...

CVE-2011-5221

Cross-site scripting XSS vulnerability in the getLog function in svnlook.php in WebSVN before 2.3.1 allows remote attackers to inject arbitrary web script or HTML via the path parameter to 1 comp.php, 2 diff.php, or 3 revision.php...

CVE-2010-5221

CVE-2010-5221 describes an untrusted search path vulnerability in STDU Explorer 1.0.201 where a local attacker can gain privileges by placing a malicious dwmapi.dll in the current working directory. The root cause is loading a Trojan horse DLL from the process working directory, enabling local pr...

CVE-2008-5221

CVE-2008-5221 affects wPortfolio 0.3 and earlier. The account_save action in admin/userinfo.php does not require authentication or knowledge of the original password, allowing remote attackers to change the admin password by submitting modified password and password_retype parameters. CVSS data i...

CVE-2008-5221

creationtimestamp| type| source ---|---|--- 2008-11-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7170...

CVE-2007-5221

CVE-2007-5221 affects Poppawid 2.7, where PHP remote file inclusion is possible via a URL supplied to the form parameter in mail/childwindow.inc.php, allowing remote code execution by an attacker. The vulnerability is documented in multiple sources (e.g., NVD, CVE lists). Affected component is a ...

CVE-2006-5221

Multiple SQL injection vulnerabilities in Cahier de texte 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 matiereID parameter in lire.php or the 2 classeID parameter in lireafaire.php...

CVE-2006-5221

CVE-2006-5221 describes multiple SQL injection vulnerabilities in the PHP application “Cahier de texte 2.0.” The vulnerabilities allow remote attackers to execute arbitrary SQL commands by tampering with the (1) matiere_ID parameter in lire.php or the (2) classe_ID parameter in lire_a_faire.php. ...

CVE-2006-5221

Multiple SQL injection vulnerabilities in Cahier de texte 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 matiereID parameter in lire.php or the 2 classeID parameter in lireafaire.php...