Lucene search
+L

109 matches found

OSV
OSV
added 2012/11/21 11:55 p.m.12 views

CVE-2012-5526

CGI.pm module before 3.63 for Perl does not properly escape newlines in 1 Set-Cookie or 2 P3P headers, which might allow remote attackers to inject arbitrary headers into responses from applications that use CGI.pm...

6.5AI score
SaveExploits0References14
CVE
CVE
added 2012/11/21 11:00 p.m.124 views

CVE-2012-5526

The CVE-2012-5526 issue affects the CGI.pm module for Perl, specifically CGI.pm before 3.63. It does not properly escape newlines in Set-Cookie and P3P headers, enabling remote header injection from applications using CGI.pm. Connected advisories (F5 K15867, SOL15867, ALAS-2013-177, and CentOS/RH...

5CVSS6.5AI score0.03261EPSS
SaveExploits0References14Affected Software1
OpenVAS
OpenVAS
added 2010/04/06 12:00 a.m.30 views

Fedora Update for sunbird FEDORA-2010-5526

Check for the Version of sunbird OpenVAS Vulnerability Test Fedora Update for sunbird FEDORA-2010-5526 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

10CVSS0.07054EPSS
SaveExploits1References2
NVD
NVD
added 2008/12/12 6:30 p.m.22 views

CVE-2008-5526

DrWeb Anti-virus 4.44.0.09170, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jpg extension, a...

9.3CVSS6.3AI score0.02951EPSS
SaveExploits0References4
CVE
CVE
added 2008/12/12 6:13 p.m.68 views

CVE-2008-5526

The CVE-2008-5526 entry describes a malware-detection bypass in several antivirus products when Internet Explorer 6/7 is used: an MZ header (EXE info) at document start and a filename with no extension, .txt, or .jpg can evade scanning. Affected products in connected data include DrWeb Anti-virus...

9.3CVSS6.2AI score0.02951EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2007/10/17 11:00 p.m.31 views

CVE-2007-5526

Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 10.1.2.0.2, 10.1.2.2, and 10.1.4.1, and Collaboration Suite 10.1.2, has unknown impact and remote attack vectors, aka AS11...

8.9AI score0.02238EPSS
SaveExploits0References8
CVE
CVE
added 2007/10/17 11:00 p.m.90 views

CVE-2007-5526

Technical details about CVE-2007-5526 are not publicly provided in the supplied documents; no affected product/version or impact specifics are stated. Monitor for updates.

10CVSS8.9AI score0.02238EPSS
SaveExploits0References8Affected Software2
NVD
NVD
added 2006/10/26 5:07 p.m.26 views

CVE-2006-5526

Multiple PHP remote file inclusion vulnerabilities in Teake Nutma Foing, as modified in Fully Modded phpBB phpbbfm 2021.4.40 and earlier, allow remote attackers to execute arbitrary PHP code via a URL in the foingrootpath parameter in a faq.php, b index.php, c list.php, d login.php, e playlist.ph...

7.5CVSS7.5AI score0.02871EPSS
SaveExploits1References5
CVE
CVE
added 2006/10/26 5:00 p.m.219 views

CVE-2006-5526

CVE-2006-3045 (and its cross-referenced entry CVE-2006-5526) describe a PHP remote file inclusion vulnerability in Foing. The affected component is manage_songs.php, in Foing 0.7.0e and earlier, where an attacker can supply a URL via foing_root_path to execute arbitrary PHP code. This is a remote...

7.5CVSS7.7AI score0.02871EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder