CVE-2012-5472

CVE-2012-5472 affects Moodle 2.2.x before 2.2.6 and 2.3.x before 2.3.3. The vulnerability arises in lib/formslib.php where a frozen form field can be manipulated by a remote authenticated user to bypass intended access restrictions. Root cause is improper handling of frozen form elements, allowin...

CVE-2007-5472

Cross-site scripting XSS vulnerability in the Server component in CA Host-Based Intrusion Prevention System HIPS before 8.0.0.93 allows remote attackers to inject arbitrary web script or HTML via requests that are written to logs for later display in the log viewer...

CVE-2007-5472

CVE-2007-5472 affects CA Host-Based Intrusion Prevention System (CA HIPS) Server on Windows. The vulnerability arises from unsanitized log data that is later displayed in the log viewer, enabling an attacker to inject arbitrary HTML/script via requests written to logs. Affected versions are CA HI...

[CAID 35754]: CA Host-Based Intrusion Prevention System (CA HIPS) Server Vulnerability

Title: CAID 35754: CA Host-Based Intrusion Prevention System CA HIPS Server Vulnerability CA Vuln ID CAID: 35754 CA Advisory Date: 2007-10-18 Reported By: David Maciejak Impact: A remote attacker can take unauthorized administrative action. Summary: CA Host-Based Intrusion Prevention System CA HI...

CVE-2006-5472

CVE-2006-5472 describes a PHP remote file inclusion vulnerability in Softerra PHP Developer Library 1.5.3 and earlier. An attacker can supply a URL in the lib_dir parameter to one of three library scripts (lib/registry.lib.php, lib/sqlcompose.lib.php, lib/sqlsearch.lib.php) to execute arbitrary P...

ICECast crafted URL DoS

The remote server runs a version of ICECast, an open source streaming audio server, which is older than version 1.3.11. This version is affected by a remote denial of service because Icecast server does not properly sanitize user-supplied input. An remote attacker could send specially crafted URL...