62 matches found
CVE-2016-5494
This CVE entry is rejected and not used.
CVE-2017-5494
Multiple cross-site scripting XSS vulnerabilities in the file types table in b2evolution through 6.8.3 allow remote authenticated users to inject arbitrary web script or HTML via a .swf file in a 1 comment frame or 2 avatar frame...
CVE-2017-5494
CVE-2017-5494 affects b2evolution before 6.8.3. Multiple XSS vulnerabilities exist in the file types table, enabling remote authenticated users to inject arbitrary web script or HTML via a .swf file in either the comment frame or the avatar frame. Documents consistently describe the affected comp...
CVE-2017-5494
Multiple cross-site scripting XSS vulnerabilities in the file types table in b2evolution through 6.8.3 allow remote authenticated users to inject arbitrary web script or HTML via a .swf file in a 1 comment frame or 2 avatar frame...
Oracle: Security Advisory (ELSA-2007-0993)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2015-5494
Cross-site scripting XSS vulnerability in the Webform Matrix Component module 7.x-4.x before 7.x-4.13 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors...
CVE-2015-5494
The CVE-2015-5494 entry covers a Cross-Site Scripting (XSS) vulnerability in the Webform Matrix Component module for Drupal (versions 7.x-4.x prior to 7.x-4.13). The issue arises from insufficient sanitization of user-supplied text, allowing remote authenticated users with certain permissions to ...
Joomla Component com_contact Info SQL Injection (CVE-2008-5494)
An SQL injection vulnerability has been reported in Digitalgreys Com Contactinfo. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
CVE-2012-5494
Cross-site scripting XSS vulnerability in pythonscripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to "u,translate."...
CVE-2012-5494
Plone contains a Cross‑Site Scripting (XSS) vulnerability (CVE-2012-5494) in python_scripts.py, affecting Plone versions before 4.2.3 and before beta 1 of 4.3. The issue is related to translation handling ("{u,}translate") and allows remote attackers to inject arbitrary web script or HTML via uns...
CVE-2012-5494
Cross-site scripting XSS vulnerability in pythonscripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to "u,translate."...
CVE-2013-5494
Cisco CVE-2013-5494 concerns a CSRF vulnerability in the Cisco Unified MeetingPlace Solution web framework (used by Unified MeetingPlace Web Conferencing and Unified MeetingPlace). The root cause is insufficient CSRF protections in the web framework code, enabling an unauthenticated, remote attac...
CVE-2013-5494
Cross-site request forgery CSRF vulnerability in the web framework in Cisco Unified MeetingPlace Solution, as used in Unified MeetingPlace Web Conferencing and Unified MeetingPlace, allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs CSCui45209 and CSCui44674...
RedHat Update for kernel RHSA-2007:0993-01
Check for the Version of kernel OpenVAS Vulnerability Test RedHat Update for kernel RHSA-2007:0993-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...
CentOS Update for kernel CESA-2007:1104 centos4 i386
Check for the Version of kernel OpenVAS Vulnerability Test CentOS Update for kernel CESA-2007:1104 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...
CVE-2008-5494
The CVE-2008-5494 entry concerns a SQL injection vulnerability in the Joomla! component com_contactinfo version 1.0. The underlying issue is that the index.php handler accepts a catid parameter that can be manipulated to inject arbitrary SQL commands, enabling remote attackers to interact with th...
CVE-2008-5494
creationtimestamp| type| source ---|---|--- 2008-11-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7093...
openSUSE 10 Security Update : libopensc2 (libopensc2-5494)
This update fixes a security issues with opensc that occurs during initializing blank smart cards with Siemens CardOS M4. It allows to set the PIN of the smart card without authorization. CVE-2008-2235 NOTE: Already initialized cards are still vulnerable after this update. Please use the...