CVE-2008-5296

Gallery 1.5.x before 1.5.10 and 1.6 before 1.6-RC3, when registerglobals is enabled, allows remote attackers to bypass authentication and gain administrative via unspecified cookies. NOTE: some of these details are obtained from third party information...

CVE-2008-5296

CVE-2008-5296 affects Gallery: versions 1.5.x before 1.5.10 and 1.6 before 1.6-RC3. When register_globals is enabled, remote attackers can bypass authentication and gain an administrative session via unspecified cookies. This is described across NVD/NVD-related entries and mirrored in OpenVAS/Ubu...

Unfixed XSS vulnerability at bmgt-workplace.rhsmith.umd.edu

Security researcher S0r3, has submitted on 18/10/2007 a cross-site-scripting XSS vulnerability affecting bmgt-workplace.rhsmith.umd.edu, which at the time of submission ranked 5296 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/11/2007. It ...

CVE-2007-5296

dbList 8.1 contains multiple XSS vulnerabilities in dblisttest.asp, exploitable via the parameters db, pagesize, sort, strKeyWords, and table. The root cause is not explicitly described beyond generic XSS in the page, and exploitation details (vector, payload, and in-the-wild status) are not prov...

CVE-2007-0913

Unspecified vulnerability in Microsoft Powerpoint allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as exploited by Trojan.PPDropper.G. NOTE: as of 20070213, it is not clear whether this is the same issue as CVE-2006-5296, CVE-2006-4694, CVE-2006-3876,...

Design/Logic Flaw

Unspecified vulnerability in Microsoft Powerpoint allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as exploited by Trojan.PPDropper.G. NOTE: as of 20070213, it is not clear whether this is the same issue as CVE-2006-5296, CVE-2006-4694, CVE-2006-3876,...

CVE-2006-5296

CVE-2006-5296 is a PowerPoint parsing vulnerability in Microsoft PowerPoint (Office era) where a crafted PowerPoint PPT file can trigger a remote code execution through improper parsing of PPT records. The connected advisory (MS06-058 family) and related CPAI entries describe memory corruption ri...

CVE-2013-5296

CVE-2013-5296 entry is rejected/not used and does not represent an active vulnerability.