CVE-2017-5480

The CVE-2017-5480 issue affects b2evolution’s back-office flow, specifically the PHP file inc/files/files.ctrl.php. A directory traversal flaw permits remote authenticated users to read or delete arbitrary files by injecting a dot-dot sequence into the fm_selected array parameter. Affected softwa...

CVE-2016-5480

CVE-2016-5480 affects Oracle Solaris 10 Bash. The connected documents specify a Bash-related vulnerability in Solaris 10, exploitable locally with low privileges and user interaction required. Impact is described as integrity compromise; exploitation is supported by Nessus plugins referencing Sol...

Moodle 2.1.x < 2.1.9 / 2.2.x < 2.2.6 / 2.3.x < 2.3.3 Multiple Vulnerabilities

Binary data 9528.prm...

CVE-2013-5480

Cisco IOS DNS-over-TCP DoS (CVE-2013-5480) affects IOS 12.2 and 15.0–15.3 when NAT is used; remote attacker can cause a device reload via a crafted IPv4 DNS TCP stream (Bug CSCuf28733). Connected sources reference Cisco advisories and Red Hat/NVD entries confirming the issue; remediation is avail...

CVE-2012-5480

The Moodle Database activity module (versions 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3) allows remote attackers to bypass restrictions on reading other participants’ entries via an advanced search, resulting in information disclosure. Root cause: insufficient enforcement of ...

CVE-2007-5480

Multiple cross-site scripting XSS vulnerabilities in InnovaAge InnovaShop allow remote attackers to inject arbitrary web script or HTML via the 1 msg parameter to msg.jsp, and the 2 contentid parameter to tc/contents/home001.jsp...

CVE-2007-5480

CVE-2007-5480 concerns multiple cross-site scripting (XSS) vulnerabilities in InnovaAge InnovaShop. The affected components are the web interfaces handling user-supplied data: the msg.jsp endpoint (parameter: msg) and the tc/contents/home001.jsp page (parameter: contentid). The root cause is unva...

CVE-2006-5480

PHP remote file inclusion vulnerability in lib/rs.php in 2le.net Castor PHP Web Builder 1.1.1 allows remote attackers to execute arbitrary PHP code via the rootpath parameter...

CVE-2006-5480

CVE-2006-5480 affects the 2le.net Castor PHP Web Builder 1.1.1. The vulnerability is a PHP remote file inclusion in lib/rs.php that allows a remote attacker to execute arbitrary PHP code by supplying a crafted rootpath parameter. This is a server-side class of flaw that enables code execution thr...