CVE-2008-5415

CA ARCserve Backup on Windows (LDBserver) across versions 11.1, 11.5, and 12.0 is affected. The vulnerability stems from insufficient verification of handle_t arguments passed to an RPC endpoint, where the handle refers to an incompatible procedure, enabling remote code execution or service crash...

Cross site scripting

Cross-site scripting XSS vulnerability in Mozilla Firefox before 2.0, when UTF-7 document content is rendered directly in UTF-7, allows remote attackers to inject arbitrary web script or HTML via a gopher URI that uses single quote characters to delimit a literal string within an XSS sequence, a...

CVE-2007-5415

Cross-site scripting XSS vulnerability in Mozilla Firefox 2.0, when UTF-7 document content is rendered directly in UTF-7, allows remote attackers to inject arbitrary web script or HTML via a gopher URI that uses '/' slash characters to delimit a literal string within an XSS sequence, a related...

CVE-2007-5415

Cross-site scripting XSS vulnerability in Mozilla Firefox 2.0, when UTF-7 document content is rendered directly in UTF-7, allows remote attackers to inject arbitrary web script or HTML via a gopher URI that uses '/' slash characters to delimit a literal string within an XSS sequence, a related...

CVE-2007-5414

CVE-2007-5414 describes a cross-site scripting (XSS) vulnerability in Mozilla Firefox prior to version 2.0. The issue arises when UTF-7 document content is rendered directly in UTF-7, allowing remote attackers to inject arbitrary script or HTML via a gopher URI that uses single quote characters t...

CVE-2007-5415

CVE-2007-5415 describes an XSS in Mozilla Firefox 2.0 where UTF-7 document content rendered in UTF-7 allows remote attackers to inject arbitrary script/HTML via a gopher: URI using '/' to delimit a literal string within an XSS sequence. A related issue is CVE-2007-5414 (single-quote delimiter). T...

CVE-2006-5415

PHP remote file inclusion vulnerability in includes/functionsnewshr.php in the News Defilante Horizontale 4.1.1 and earlier module for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2006-5415

CVE-2006-5415 describes a PHP remote file inclusion in the News Defilante Horizontale 4.1.1 and earlier phpBB module. The vulnerability affects the file includes/functions_newshr.php and allows remote attackers to execute arbitrary PHP code by supplying a URL in the phpbb_root_path parameter. The...