110 matches found
CVE-2012-5296
CVE-2012-5296 corresponds to multiple cross-site scripting (XSS) vulnerabilities in the Mavili Guestbook application, reported as released in November 2007. The vulnerability is triggered via the id parameter to four scripts (approve.asp, delete.asp, edit.asp, edit2.asp), enabling remote injectio...
SuSE 10 Security Update : CUPS (ZYPP Patch Number 5296)
specially crafted PNG files could cause an integer overflow in the png filter. CVE-2008-1693 - specially crafted pdf files with embedded fonts could crash pdftops. CVE-2008-1693 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...
CVE-2008-5296
CVE-2008-5296 affects Gallery: versions 1.5.x before 1.5.10 and 1.6 before 1.6-RC3. When register_globals is enabled, remote attackers can bypass authentication and gain an administrative session via unspecified cookies. This is described across NVD/NVD-related entries and mirrored in OpenVAS/Ubu...
CVE-2008-5296
Gallery 1.5.x before 1.5.10 and 1.6 before 1.6-RC3, when registerglobals is enabled, allows remote attackers to bypass authentication and gain administrative via unspecified cookies. NOTE: some of these details are obtained from third party information...
Unfixed XSS vulnerability at bmgt-workplace.rhsmith.umd.edu
Security researcher S0r3, has submitted on 18/10/2007 a cross-site-scripting XSS vulnerability affecting bmgt-workplace.rhsmith.umd.edu, which at the time of submission ranked 5296 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/11/2007. It ...
CVE-2007-5296
dbList 8.1 contains multiple XSS vulnerabilities in dblisttest.asp, exploitable via the parameters db, pagesize, sort, strKeyWords, and table. The root cause is not explicitly described beyond generic XSS in the page, and exploitation details (vector, payload, and in-the-wild status) are not prov...
CVE-2007-0913
Unspecified vulnerability in Microsoft Powerpoint allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as exploited by Trojan.PPDropper.G. NOTE: as of 20070213, it is not clear whether this is the same issue as CVE-2006-5296, CVE-2006-4694, CVE-2006-3876,...
Design/Logic Flaw
Unspecified vulnerability in Microsoft Powerpoint allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as exploited by Trojan.PPDropper.G. NOTE: as of 20070213, it is not clear whether this is the same issue as CVE-2006-5296, CVE-2006-4694, CVE-2006-3876,...
CVE-2006-5296
CVE-2006-5296 is a PowerPoint parsing vulnerability in Microsoft PowerPoint (Office era) where a crafted PowerPoint PPT file can trigger a remote code execution through improper parsing of PPT records. The connected advisory (MS06-058 family) and related CPAI entries describe memory corruption ri...