65 matches found
CVE-2008-5249
CVE-2008-5249 is a cross-site scripting (XSS) vulnerability in MediaWiki 1.13.0–1.13.2 that allows remote attackers to inject arbitrary script/HTML via unspecified vectors. Connected advisories confirm affected products and later fixes: Debian’s DSA-1901-1 for mediawiki1.7 cites CVE-2008-5249 amo...
CVE-2007-5249
CVE-2007-5249 describes multiple buffer overflows in the Unreal Engine logging function (used by America’s Army and America’s Army Special Forces 2.8.2 and earlier) that occur when PunkBuster is enabled, allowing remote DoS via long PB_Y (to YPG on UDP 1716) or PB_U (to UCON on UDP 1716) packets....
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in TagIt! Tagboard 2.1.B Build 2 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the 1 configpath parameter to a tagviewer.php, b tagprocess.php, and c CONFIG/errmsg.inc.php; and d...
CVE-2006-5249
CVE-2006-5249 describes a PHP remote file inclusion vulnerability in TagIt! Tagboard 2.1.B Build 2 (tagit2b). The issue affects tagmin/delTagUser.php and can allow remote attackers to execute arbitrary PHP code via a URL supplied to the configpath parameter. The description does not specify affec...