32 matches found
Mozilla Firefox < 50.0 Multiple Vulnerabilities
The version of Mozilla Firefox installed on the remote Windows host is prior to 50.0. It is, therefore, affected by multiple vulnerabilities, the majority of which are remote code execution vulnerabilities. An unauthenticated, remote attacker can exploit these vulnerabilities by convincing a user...
CVE-2011-5293
The CVE-2011-5293 entry concerns ThreeDify Designer 5.0.2. The cmdSave method of the ThreeDifyDesigner.1 ActiveX control in ActiveSolid.dll allows remote attackers to write to arbitrary files via a pathname argument. Affected product: ThreeDify Designer 5.0.2 (ActiveX control). Vulnerability type...
CVE-2010-5293
wp-includes/comment.php in WordPress before 3.0.2 does not properly whitelist trackbacks and pingbacks in the blogroll, which allows remote attackers to bypass intended spam restrictions via a crafted URL, as demonstrated by a URL that triggers a substring match...
CVE-2010-5293
The vulnerability CVE-2010-5293 affects WordPress
CVE-2010-5293
wp-includes/comment.php in WordPress before 3.0.2 does not properly whitelist trackbacks and pingbacks in the blogroll, which allows remote attackers to bypass intended spam restrictions via a crafted URL, as demonstrated by a URL that triggers a substring match...
CVE-2010-5293
wp-includes/comment.php in WordPress before 3.0.2 does not properly whitelist trackbacks and pingbacks in the blogroll, which allows remote attackers to bypass intended spam restrictions via a crafted URL, as demonstrated by a URL that triggers a substring match...
CVE-2012-5293
SAPID CMS 1.2.3 Stable is affected by multiple PHP remote file inclusion vulnerabilities that allow an attacker to execute arbitrary PHP code via a URL in the GLOBALS[root_path] (usr/extensions/get_tree.inc.php) or root_path (usr/extensions/get_infochannel.inc.php) parameters. The vulnerability e...
CVE-2012-5293
creationtimestamp| type| source ---|---|--- 2012-01-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18342...
CVE-2008-5293
CVE-2008-5293: SQL injection in WebStudio eHotel’s index.php via the pageid parameter allows remote execution of arbitrary SQL commands. Affected: WebStudio eHotel (Web application). Severity: CVSSv2 base score 7.5 (HIGH). Remediation details are not provided in the connected documents.
CVE-2008-5293
creationtimestamp| type| source ---|---|--- 2008-11-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7222...
CVE-2006-5293
Cross-site scripting XSS vulnerability in index.php in PhpOutsourcing Noah's Classifieds 1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the frommethod parameter...