55 matches found
CVE-2011-5315
Cross-site request forgery CSRF vulnerability in admin/index.php in whCMS 0.115 alpha allows remote attackers to hijack the authentication of administrators for requests that modify credentials via a user save action...
CVE-2014-5315
Cross-site scripting XSS vulnerability in the Help page in Adobe Acrobat 9.5.2 and earlier and ColdFusion 8.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2014-5315
CVE-2014-5315 affects Adobe products via an XSS in the Help page. Affected: Adobe Acrobat <= 9.5.2 (Mac/Windows) and Adobe ColdFusion
CVE-2014-5315
Cross-site scripting XSS vulnerability in the Help page in Adobe Acrobat 9.5.2 and earlier and ColdFusion 8.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2013-5315
Cross-site scripting XSS vulnerability in the Resource Manager in the MEE submodule mee.module in the Scald module 6.x-1.x before 6.x-1.0-beta3 and 7.x-1.x before 7.x-1.1 for Drupal allows remote attackers to inject arbitrary web script or HTML via the atom title, a different vector than...
CVE-2013-5315
CVE-2013-5315 is an XSS flaw in Drupal’s Scald module (MEE submodule). Affected: Scald 6.x-1.x before 6.x-1.0-beta3 and Scald 7.x-1.x before 7.x-1.1. Vulnerability: unsanitized atom title in Resource Manager (mee.module) allows remote injection of script/HTML. Impact is low to partial in integrit...
CVE-2012-5315
Technical details about CVE-2012-5315 are not publicly provided in the supplied documents. Monitor for updates from vendors or security advisories.
CVE-2012-5315
creationtimestamp| type| source ---|---|--- 2012-01-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18402...
Fedora Update for roundcubemail FEDORA-2008-5315
Check for the Version of roundcubemail OpenVAS Vulnerability Test Fedora Update for roundcubemail FEDORA-2008-5315 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
Apple iPhone Configuration Web Utility Directory Traversal Vulnerability
This host has Apple iPhone Configuration Web Utility installed and is prone to directory traversal vulnerability. OpenVAS Vulnerability Test $Id: gbappleiphoneconfwebutltydirtrvslvuln.nasl 5370 2017-02-20 15:24:26Z cfi $ Apple iPhone Configuration Web Utility Directory Traversal Vulnerability...
CVE-2008-5315
CVE-2008-5315: Apple iPhone Configuration Web Utility 1.0 for Windows is affected by a directory traversal vulnerability in its web interface that allows remote attackers to read arbitrary files via unspecified vectors. The issue is tied to the web service component and is documented with CVSS v2...
Immunity Canvas: LIVEALBUM_INCLUDE
Name| livealbuminclude ---|--- CVE| CVE-2007-5315 Exploit Pack| CANVAS Description| LiveAlbum remote file include Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: LiveAlbum CVE Url: https://vulners.com/cve/CVE-2007-5315 CVE Name: CVE-2007-5315...
CVE-2007-5315
PHP remote file inclusion vulnerability in common.php in LiveAlbum 0.9.0, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the livealbumdir parameter...
CVE-2007-5315
LiveAlbum 0.9.0 is affected by a PHP remote file inclusion via the common.php handling when register_globals is enabled. Attackers can supply a URL to livealbum_dir to run arbitrary PHP code on the affected system. The vulnerability is documented in multiple sources (CVE-2007-5315) and is associa...
CVE-2006-5315
CVE-2006-5315 affects PHP-based registroTL via main.php, where the page parameter can include ftp:// URLs, enabling a remote file inclusion that lets an attacker execute arbitrary PHP code. The vulnerability is in the handling of external file references, constituting a full RCE under the describ...