109 matches found
CVE-2012-5526
CGI.pm module before 3.63 for Perl does not properly escape newlines in 1 Set-Cookie or 2 P3P headers, which might allow remote attackers to inject arbitrary headers into responses from applications that use CGI.pm...
CVE-2012-5526
The CVE-2012-5526 issue affects the CGI.pm module for Perl, specifically CGI.pm before 3.63. It does not properly escape newlines in Set-Cookie and P3P headers, enabling remote header injection from applications using CGI.pm. Connected advisories (F5 K15867, SOL15867, ALAS-2013-177, and CentOS/RH...
Fedora Update for sunbird FEDORA-2010-5526
Check for the Version of sunbird OpenVAS Vulnerability Test Fedora Update for sunbird FEDORA-2010-5526 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
CVE-2008-5526
DrWeb Anti-virus 4.44.0.09170, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jpg extension, a...
CVE-2008-5526
The CVE-2008-5526 entry describes a malware-detection bypass in several antivirus products when Internet Explorer 6/7 is used: an MZ header (EXE info) at document start and a filename with no extension, .txt, or .jpg can evade scanning. Affected products in connected data include DrWeb Anti-virus...
CVE-2007-5526
Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 10.1.2.0.2, 10.1.2.2, and 10.1.4.1, and Collaboration Suite 10.1.2, has unknown impact and remote attack vectors, aka AS11...
CVE-2007-5526
Technical details about CVE-2007-5526 are not publicly provided in the supplied documents; no affected product/version or impact specifics are stated. Monitor for updates.
CVE-2006-5526
Multiple PHP remote file inclusion vulnerabilities in Teake Nutma Foing, as modified in Fully Modded phpBB phpbbfm 2021.4.40 and earlier, allow remote attackers to execute arbitrary PHP code via a URL in the foingrootpath parameter in a faq.php, b index.php, c list.php, d login.php, e playlist.ph...
CVE-2006-5526
CVE-2006-3045 (and its cross-referenced entry CVE-2006-5526) describe a PHP remote file inclusion vulnerability in Foing. The affected component is manage_songs.php, in Foing 0.7.0e and earlier, where an attacker can supply a URL via foing_root_path to execute arbitrary PHP code. This is a remote...