CVE-2013-5490

Cisco Prime DCNM (DCNM) versions prior to 6.2(1) are affected by CVE-2013-5490 due to an XML External Entity (XXE) vulnerability. An unauthenticated, remote attacker could exploit the XXE flaw to read arbitrary text files on the affected system. This issue is part of a set of vulnerabilities disc...

CVE-2008-5490

CVE-2008-5490 describes an SQL injection in the PHPStore Yahoo Answers site, specifically in the file index.php where the vulnerable parameter is the id parameter. The underlying cause, as stated in the public records, is improper handling/sanitization of user-supplied input, enabling remote atta...

SuSE 10 Security Update : Python (ZYPP Patch Number 5490)

This update of python fixes several security vulnerabilities. CVE-2008-1679 / CVE-2008-1887 / CVE-2008-3143 / CVE-2008-3142 / CVE-2008-3144 / CVE-2008-2315 / CVE-2008-2316 Note: for SLE10 a non-security bug in mmap was fixed too. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text...

CVE-2007-5490

CVE-2007-5490 describes an SQL injection in default.asp of Okul Otomasyon Portal 2.0, exploitable via the id parameter. Affected: Okul Otomasyon Portal 2.0 (default.asp). Root cause: improper handling of user input leading to SQL command execution. Impact: remote attacker can execute arbitrary SQ...

CVE-2006-5490

CVE-2006-5490 affects the Segue Content Management System (CMS) prior to version 1.5.8 and involves multiple SQL injection vulnerabilities. The underlying issue allows remote attackers to execute arbitrary SQL commands via unspecified vectors, with impact described as partial confidentiality, int...