51 matches found
CVE-2016-5389
CVE-2016-5389 is rejected; this candidate is a reservation duplicate of CVE-2016-5696 and not active.
CVE-2014-5389
Content Audit WordPress plugin (before 1.6.1) contains a blind SQL injection in content-audit-schedule.php. An attacker can modify the Audited content types option to inject SQL that runs, e.g., via daily wp-cron, potentially exfiltrating data (e.g., password hashes). Affected versions: ≤1.6.1; r...
WordPress Content Audit 1.6 Blind SQL Injection
Details ================ Software: Content Audit Version: 1.6 Homepage: http://wordpress.org/plugins/content-audit/ Advisory report: https://security.dxw.com/advisories/blind-sqli-vulnerability-in-content-audit-could-allow-a-privileged-attacker-to-exfiltrate-password-hashes/ CVE: CVE-2014-5389...
WordPress Content Audit 1.6 Blind SQL Injection Vulnerability
WordPress Content Audit plugin version 1.6 suffers from a remote SQL injection vulnerability. Details ================ Software: Content Audit Version: 1.6 Homepage: http://wordpress.org/plugins/content-audit/ Advisory report:...
CVE-2013-5389
CVE-2013-5389 describes a cross-site scripting (XSS) vulnerability in IBM Lotus Domino iNotes. The affected products are IBM Domino iNotes for version 8.5.3 before FP5 IF2 and 9.0 before IF5. The vulnerability allows remote attackers to inject arbitrary web script or HTML via unspecified vectors....
[CVE-2012-5389] Null Pointer Derefence in Dart Webserver <= 1.9.2
Overview =============== DartWebserver.Dll is an HTTP server provided by Dart Comunications dart.com. It is distributed in their PowerTCP/Webserver For ActiveX product and likely other similar products. "Build web applications in any familiar software development environment. Use WebServer for...
SuSE 11.1 Security Update : pidgin, libpurple and finch (SAT Patch Number 5389)
This update fixes the following security issues : - 604225: MSN emoticon DoS. CVE-2010-1624 - 648273: multiple NULL pointer dereference weaknesses. CVE-2010-3711 - 722199: vulnerability in SILC protocol handling CVE-2011-3594 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive te...
STUN Detection
The remote service supports the STUN Session Traversal Utilities for NAT protocol as described in RFC 5389. STUN helps client software behind a NAT router discover the external public address and the behavior of the router. Note that an earlier version of the protocol used a different acronym -...
Microsoft SQL Server Suspicious Command Detection
Binary data 5389.prm...
CVE-2007-5389
The CVE-2007-5389 entry concerns the Joomla! swMenuFree (com_swmenufree) version 4.6 component, where a PHP remote file inclusion vulnerability exists in preview.php. The underlying issue allows an attacker to execute arbitrary PHP code by supplying a URL in the mosConfig_absolute_path parameter....
CVE-2006-5389
The CVE-2006-5389 issue affects the PHP-Wyana component (tools/tellhim.php) where a malformed or invalid lang parameter causes an error message to disclose the server path, enabling information disclosure to remote attackers. The vulnerability is categorized as an information disclosure with part...