48 matches found
CVE-2014-6178
CVE-2014-6178 affects IBM WebSphere Service Registry and Repository (WSRR) versions 7.5.x before 7.5.0.4 and 8.0.x before 8.0.0.3. It is a cross-site scripting (XSS) vulnerability in the WSRR widgets that allows remote authenticated users to inject arbitrary web script or HTML via unspecified vec...
Adobe ColdFusion FCKeditor Input Validation Flaw Arbitrary File Upload (CVE-2008-6178; CVE-2009-2265)
A vulnerability has been reported in Adobe Systems ColdFusion that could allow remote users to upload files in arbitrary directories potentially leading to a system compromise. The vulnerability is due to an input validation error in the FCKeditor which is embedded in ColdFusion 8. Remote attacke...
CVE-2013-6178
RSA Archer GRC 5.x is affected by multiple cross-site scripting (XSS) vulnerabilities (CVE-2013-6178). The issue lies in RSA Archer GRC 5.x before 5.4 SP1; exploitation could allow attackers to execute arbitrary HTML/Script in a user session. RSA advises upgrading to RSA Archer GRC 5.4 P2 or 5.4 ...
CVE-2008-6178
The CVE-2008-6178 issue is a vulnerability in FCKeditor 2.2’s editor/filemanager/browser/default/connectors/php/connector.php where FileUpload accepts a file with PHP content masquerading as an image (via a ZIP header) and stores it under UserFiles/File/, enabling remote code execution. Affected ...
CVE-2008-6178
creationtimestamp| type| source ---|---|--- 2008-10-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6783 2009-02-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8060...
CVE-2007-6178
CVE-2007-6178 is a known remote file inclusion in Easy Hosting Control Panel (EHCP) for Ubuntu up to version 0.22.8 and earlier. The vulnerability allows an attacker to supply a URL in the confdir parameter to config/dbutil.bck.php and config/dbutil.php, potentially enabling arbitrary PHP code ex...
CVE-2006-6178
CVE-2006-6178 – Details : A buffer overflow in Trend Micro OfficeScan 7.3 (prior to build 7.3.0.1087) affects the PCCSRV/Web_console/RemoteInstallCGI/Wizard.exe, enabling a remote attacker to execute arbitrary code via unknown attack vectors. The NVD entry (CVSS v2 base score 7.5, HIGH) confirms ...
