67 matches found
CVE-2014-6228
Integer overflow in the stringchunksplit function in hphp/runtime/base/zend-string.cpp in Facebook HipHop Virtual Machine HHVM before 3.3.0 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via crafted arguments to the chunksplit...
CVE-2014-6228
HHVM before 3.3.0 is affected by an integer overflow in the string_chunk_split function (zend-string.cpp) that can be triggered by crafted chunk_split arguments, allowing remote denial of service (application crash) or potentially other impact. The CVE is supported by the NVD entry; no remediatio...
CVE-2008-6228
Pre Multi-Vendor Shopping Malls allows remote attackers to bypass authentication and gain administrative access by setting the 1 adminname and the 2 adminid cookies to "admin"...
CVE-2008-6228
CVE-2008-6228 describes an authentication bypass in Pre Multi-Vendor Shopping Malls where remote attackers can gain administrative access by setting the adminname and adminid cookies to “admin.” The issue is triggered by cookie-based authentication bypass, with a CVSS2 base score of 7.5 (HIGH) an...
CVE-2008-6228
creationtimestamp| type| source ---|---|--- 2008-11-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6999...
CVE-2007-6228
The CVE-2007-6228 issue is a stack-based buffer overflow in the yt.ythelper.2 ActiveX control used by Yahoo! Toolbar 1.4.1. A long argument to the c() method can remotely trigger a denial of service (browser crash). Public documentation notes no patch from the vendor at the time of reports; users...
CVE-2006-6228
CVE-2006-6228 is an XSS vulnerability in Codewalkers ltwCalendar (also called PHP Event Calendar) prior to 4.2.1. Remote attackers can inject arbitrary HTML or web script via unknown vectors. The NVD record notes a CVSSv2 base score of 6.8 (MEDIUM) with network attack vector, no authentication, a...