72 matches found
CVE-2011-5226
Cross-site request forgery CSRF vulnerability in wordpresssentinel.php in the Sentinel plugin 1.0.0 for WordPress allows remote attackers to hijack the authentication of an administrator for requests that trigger snapshots...
CVE-2012-5226
CVE-2012-5226 : Multiple XSS vulnerabilities in Peel SHOPPING 2.8 and 2.9 allow remote attackers to inject arbitrary JavaScript/HTML via (1) the motclef parameter to achat/recherche.php or (2) PATH_INFO to index.php. Affected software is Peel SHOPPING versions 2.8 and 2.9. The description specifi...
CVE-2010-5226
Summary: CVE-2010-5226 affects Autodesk Design Review 2011 (version 11.0.0.86) and involves multiple untrusted search path vulnerabilities. The root cause is placing a Trojan horse through (1) dwmapi.dll, (2) whiptk_wt.7.12.601.dll, or (3) xaml_wt.7.6.0.dll in the current working directory, demon...
CVE-2008-5226
CVE-2008-5226 is an SQL injection affecting the MambAds (com_mambads) component used with Mambo. The vulnerability exists in version 1.0 RC1 Beta and 1.0 RC1, where an attacker can exploit the ma_cat parameter in a view action to index.php to execute arbitrary SQL commands. This is a distinct vec...
CVE-2008-5226
creationtimestamp| type| source ---|---|--- 2008-05-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5692...
openSUSE 10 Security Update : sarg (sarg-5226)
Multiple stack-based buffer overflows have been fixed in sarg. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update sarg-5226. The text description of this plugin is C SUSE LLC...
CVE-2007-5226
ircserver.c in dircproxy 1.2.0 and earlier allows remote attackers to cause a denial of service segmentation fault via an ACTION command without a parameter, which triggers a NULL pointer dereference, as demonstrated using a blank /me message from irssi...
CVE-2007-5226
The CVE-2007-5226 issue affects dircproxy (irc_proxy) up to version 1.2.0. The vulnerability is a NULL pointer dereference triggered by processing an ACTION command without a parameter, leading to a denial of service (segmentation fault). Demonstrations reference sending a blank /me message from ...
CVE-2006-5226
CVE-2006-5226 is a PHP remote file inclusion vulnerability in Prologin.fr Freenews 1.1 and earlier, due to the chemin parameter in moteur/moteur.php, allowing remote attackers to execute arbitrary PHP code via a URL. Affected software: Freenews 1.1 and earlier. Impact: arbitrary code execution wi...
CVE-2006-5226
PHP remote file inclusion vulnerability in moteur/moteur.php in Prologin.fr Freenews 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the chemin parameter...