CVE-2013-5490

Cisco Prime Data Center Network Manager DCNM before 6.21 allows remote attackers to read arbitrary text files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue, aka Bug ID CSCud80148...

CVE-2008-5490

CVE-2008-5490 describes an SQL injection in the PHPStore Yahoo Answers site, specifically in the file index.php where the vulnerable parameter is the id parameter. The underlying cause, as stated in the public records, is improper handling/sanitization of user-supplied input, enabling remote atta...

SuSE 10 Security Update : Python (ZYPP Patch Number 5490)

This update of python fixes several security vulnerabilities. CVE-2008-1679 / CVE-2008-1887 / CVE-2008-3143 / CVE-2008-3142 / CVE-2008-3144 / CVE-2008-2315 / CVE-2008-2316 Note: for SLE10 a non-security bug in mmap was fixed too. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text...

CVE-2007-5490

CVE-2007-5490 describes an SQL injection in default.asp of Okul Otomasyon Portal 2.0, exploitable via the id parameter. Affected: Okul Otomasyon Portal 2.0 (default.asp). Root cause: improper handling of user input leading to SQL command execution. Impact: remote attacker can execute arbitrary SQ...

CVE-2006-5490

CVE-2006-5490 affects the Segue Content Management System (CMS) prior to version 1.5.8 and involves multiple SQL injection vulnerabilities. The underlying issue allows remote attackers to execute arbitrary SQL commands via unspecified vectors, with impact described as partial confidentiality, int...