CVE-2012-5932

Eval injection vulnerability in the ldapagnteval function in ldapagnt.dll in unifid.exe in NetIQ Privileged User Manager 2.3.x before 2.3.1 HF2 allows remote attackers to execute arbitrary Perl code via a crafted application/x-amf request...

CVE-2012-5932

CVE-2012-5932 describes an eval-injection in the ldapagnt_eval function of NetIQ Privileged User Manager (unifid.exe, ldapagnt.dll) affecting 2.3.x up to before 2.3.1 HF2. A crafted application/x-amf request can trigger remote code execution (Perl) with SYSTEM privileges, as reported by multiple ...

CVE-2012-5932

creationtimestamp| type| source ---|---|--- 2012-11-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/22903 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/novell/netiqpumeval.rb 2025-02-06 03:13:40+00:00| seen|...

CVE-2008-5932

The CVE refers to CodeAvalanche FreeForum with an improper access control flaw that exposes the web root _private/CAForum.mdb, allowing remote attackers to download the database file containing passwords. The affected component is the forum software; the underlying cause is insufficient access co...

CVE-2007-5932

CVE-2007-5932 describes multiple cross-site scripting (XSS) vulnerabilities in Fatwire Content Server (CS) CMS 6.3.0, allowing remote attackers to inject arbitrary script or HTML via unspecified fields related to the search function and advanced search function (and possibly other components). Th...

CVE-2006-5932

Kahua before 0.7, when running multiple applications under a single supervisor, grants application access on the basis of username instead of username and database name, which allows remote authenticated users to obtain unauthorized access if different databases assign the same username to...