42 matches found
CVE-2007-6164
Eurologon CMS is affected by multiple SQL injection vulnerabilities: the id parameter in reviews.php, links.php, and articles.php can be exploited to execute arbitrary SQL remotely. Root cause is improper input handling in these PHP scripts. The provided documents do not specify affected version ...
7.5CVSS8.6AI score0.00987EPSS
SaveExploits2References4Affected Software1
CVE-2006-6164
The CVE-2006-6164 entry concerns OpenBSD 3.9 and 4.0 where the _dl_unsetenv function in loader.c of the ELF ld.so fails to remove duplicate environment variables. This could allow local users to pass dangerous variables (e.g., LD_PRELOAD) to loading processes, potentially enabling privilege escal...
7.2CVSS6.9AI score0.00326EPSS
SaveExploits0References9Affected Software1
20