31 matches found
CVE-2011-5293
The CVE-2011-5293 entry concerns ThreeDify Designer 5.0.2. The cmdSave method of the ThreeDifyDesigner.1 ActiveX control in ActiveSolid.dll allows remote attackers to write to arbitrary files via a pathname argument. Affected product: ThreeDify Designer 5.0.2 (ActiveX control). Vulnerability type...
CVE-2010-5293
wp-includes/comment.php in WordPress before 3.0.2 does not properly whitelist trackbacks and pingbacks in the blogroll, which allows remote attackers to bypass intended spam restrictions via a crafted URL, as demonstrated by a URL that triggers a substring match...
CVE-2010-5293
The vulnerability CVE-2010-5293 affects WordPress
CVE-2010-5293
wp-includes/comment.php in WordPress before 3.0.2 does not properly whitelist trackbacks and pingbacks in the blogroll, which allows remote attackers to bypass intended spam restrictions via a crafted URL, as demonstrated by a URL that triggers a substring match...
CVE-2010-5293
wp-includes/comment.php in WordPress before 3.0.2 does not properly whitelist trackbacks and pingbacks in the blogroll, which allows remote attackers to bypass intended spam restrictions via a crafted URL, as demonstrated by a URL that triggers a substring match...
CVE-2012-5293
SAPID CMS 1.2.3 Stable is affected by multiple PHP remote file inclusion vulnerabilities that allow an attacker to execute arbitrary PHP code via a URL in the GLOBALS[root_path] (usr/extensions/get_tree.inc.php) or root_path (usr/extensions/get_infochannel.inc.php) parameters. The vulnerability e...
CVE-2012-5293
creationtimestamp| type| source ---|---|--- 2012-01-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18342...
CVE-2008-5293
CVE-2008-5293: SQL injection in WebStudio eHotel’s index.php via the pageid parameter allows remote execution of arbitrary SQL commands. Affected: WebStudio eHotel (Web application). Severity: CVSSv2 base score 7.5 (HIGH). Remediation details are not provided in the connected documents.
CVE-2008-5293
creationtimestamp| type| source ---|---|--- 2008-11-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7222...
CVE-2006-5293
Cross-site scripting XSS vulnerability in index.php in PhpOutsourcing Noah's Classifieds 1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the frommethod parameter...