CVE-2013-6174

EMC Document Sciences xPression contains an open redirect vulnerability (CVE-2013-6174) in the xAdmin application (and related xDashboard context) that could be exploited to redirect users to arbitrary sites for phishing. Affected versions are 4.1 SP1 before Patch 47, 4.2 before Patch 26, and 4.5...

SuSE 10 Security Update : CUPS (ZYPP Patch Number 6174)

Specially crafted tiff files could cause an integer overflow in the 'imagetops' filter. CVE-2009-0163 Specially crafted pdf files could cause overflows in the 'pdftops' filter. CVE-2009-0165 / CVE-2009-0166 / CVE-2009-0146 / CVE-2009-0147 / CVE-2009-0799 / CVE-2009-0800 / CVE-2009-1179 /...

CVE-2008-6174

Cross-site scripting XSS vulnerability in admin/postlister/index.php in Jetbox CMS 2.1 allows remote attackers to inject arbitrary web script or HTML via the liste parameter...

CVE-2008-6174

CVE-2008-6174 is an XSS vulnerability affecting Jetbox CMS 2.1, specifically in admin/postlister/index.php where the liste parameter can be exploited to inject arbitrary web script or HTML. The descriptions across NVD and related records confirm a cross-site scripting flaw without details on obse...

CVE-2007-6174

CVE-2007-6174 affects PHPDevShell prior to 0.7.0. The vuln allows remote authenticated users to escalate privileges by sending a crafted request to update a user profile, leading to complete confidentiality, integrity, and availability impact as per CVSS metrics (base score 8.5, HIGH). Root cause...

CVE-2006-6174

Cross-site scripting XSS vulnerability in tDiary before 2.0.3 and 2.1.x before 2.1.4.20061126 allows remote attackers to inject arbitrary web script or HTML via the conf parameter in 1 tdiary.rb and 2 skel/conf.rhtml...

CVE-2006-6174

Cross-site scripting XSS vulnerability in tDiary before 2.0.3 and 2.1.x before 2.1.4.20061126 allows remote attackers to inject arbitrary web script or HTML via the conf parameter in 1 tdiary.rb and 2 skel/conf.rhtml...

CVE-2006-6174

CVE-2006-6174 describes a cross-site scripting (XSS) vulnerability in tDiary prior to 2.0.3 and in 2.1.x prior to 2.1.4.20061126. The flaw allows remote attackers to inject arbitrary web script or HTML via the conf parameter in (1) tdiary.rb and (2) skel/conf.rhtml. The connection documents consi...

CVE-2006-6174

Cross-site scripting XSS vulnerability in tDiary before 2.0.3 and 2.1.x before 2.1.4.20061126 allows remote attackers to inject arbitrary web script or HTML via the conf parameter in 1 tdiary.rb and 2 skel/conf.rhtml...