87 matches found
CVE-2008-5621
Cross-site request forgery CSRF vulnerability in phpMyAdmin 2.11.x before 2.11.9.4 and 3.x before 3.1.1.0 allows remote attackers to perform unauthorized actions as the administrator via a link or IMG tag to tblstructure.php with a modified table parameter. NOTE: other unspecified pages are also...
SQL injection through XSRF on several pages
PMASA-2008-10 Announcement-ID: PMASA-2008-10 Date: 2008-12-09 Summary SQL injection through XSRF on several pages Description A logged-in user can be subject of SQL injection through cross site request forgery. Several pages which use affected library in phpMyAdmin are vulnerable and the attack c...
CVE-2008-5621
creationtimestamp| type| source ---|---|--- 2008-12-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7382...
CVE-2007-5621
CVE-2007-5621 involves multiple cross-site scripting (XSS) vulnerabilities in the Drupal Token module. Affected are Token versions before 4.7.x-1.5 and 5.x before 5.x-1.9, as used by modules such as ASIN Field, e-Commerce, Fullname field for CCK, Invite, Node Relativity, Pathauto, PayPal Node, an...
CVE-2006-5621
PHP remote file inclusion vulnerability in end.php in askrave 0.9 PR, and other versions before 0.9b, allows remote attackers to execute arbitrary PHP code via a URL in the footfile parameter...
CVE-2006-5621
CVE-2006-5621 concerns a PHP remote file inclusion in end.php of ask_rave 0.9 PR and earlier versions before 0.9b, allowing an attacker to execute arbitrary PHP code by supplying a URL in the footfile parameter. Affected software: ask_rave up to 0.9b. Root cause: improper handling of the footfile...
