CVE-2011-5294

The CVE-2011-5294 issue affects Kofax e-Transactions Sender Sendbox 2.5.0.933, specifically the LEADeMail.LEADSmtp.20 ActiveX control (LTCML14n.dll 14.0.0.34). The SaveMessage method allows remote attackers to write to arbitrary files via a pathname supplied as the first argument. Multiple connec...

CVE-2010-5294

Multiple cross-site scripting XSS vulnerabilities in the requestfilesystemcredentials function in wp-admin/includes/file.php in WordPress before 3.0.2 allow remote servers to inject arbitrary web script or HTML by providing a crafted error message for a 1 FTP or 2 SSH connection attempt...

CVE-2010-5294

CVE-2010-5294 concerns WordPress before 3.0.2, where multiple XSS vulnerabilities exist in the function request_filesystem_credentials within wp-admin/includes/file.php . The flaw lets remote servers inject arbitrary web script or HTML by sending a crafted error message during an FTP or SSH conne...

CVE-2012-5294

CVE-2012-5294 describes a SQL injection in art_detalle.php of MyStore Xpress Tienda Virtual, exploitable by passing an id parameter to remotely execute arbitrary SQL commands. Multiple connected sources (NVD entry and related records) confirm the vendor/product context and the vulnerable componen...

CVE-2012-5294

creationtimestamp| type| source ---|---|--- 2012-01-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36486...

Dada Mail < 4.0.2 List Membership Requirement Bypass

Binary data 5294.prm...

CVE-2008-5294

SQL injection vulnerability in index.php in WebStudio eCatalogue allows remote attackers to execute arbitrary SQL commands via the pageid parameter...

CVE-2008-5294

CVE-2008-5294 is a SQL injection vulnerability affecting WebStudio eCatalogue, specifically in index.php where the pageid parameter can be exploited to execute arbitrary SQL commands. The vulnerability is documented in public sources (e.g., NVD, Exploit-DB), with an NVD base score of 7.5 (HIGH) a...

CVE-2008-5294

creationtimestamp| type| source ---|---|--- 2008-11-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7223...

CVE-2006-5294

Cross-site scripting XSS vulnerability in index.php in phplist before 2.10.3 allows remote attackers to inject arbitrary web script or HTML via the unsubscribeemail parameter...

CVE-2006-5294

Cross-site scripting XSS vulnerability in index.php in phplist before 2.10.3 allows remote attackers to inject arbitrary web script or HTML via the unsubscribeemail parameter...

CVE-2006-5294

CVE-2006-5294 affects phplist (index.php) prior to version 2.10.3. The vulnerability is a Cross-Site Scripting (XSS) flaw that enables remote attackers to inject arbitrary web script or HTML through the unsubscribeemail parameter. Root cause is improper handling/sanitization of user-supplied inpu...

CVE-2013-5294

This CVE-2013-5294 entry is rejected/not used per the Initial Description.