56 matches found
CVE-2016-6619
CVE-2016-6619 is a SQL injection vulnerability in phpMyAdmin's user interface preference feature. The flaw allows an attacker to inject SQL against the control user account by exploiting inadequate input sanitization in the UI, affecting multiple branches: 4.6.x (pre-4.6.4), 4.4.x (pre-4.4.15.8),...
SQL injection attack as control user
PMASA-2016-42 Announcement-ID: PMASA-2016-42 Date: 2016-07-15 Summary SQL injection attack as control user Description A vulnerability was discovered in the user interface preference feature where a user can execute an SQL injection attack against the account of the control user. Severity We...
CVE-2015-6619
CVE-2015-6619 affects the Android kernel: elevation of privilege via a crafted app in the Linux-based kernel prior to Android 5.1.1 LMY48Z and 6.0 prior to 2015-12-01. The root cause is an internal bug (23520714) that could allow local attackers to execute arbitrary code with device root privileg...
CVE-2014-6619
CVE-2014-6619 stems from multiple stored XSS flaws in the Pizza Inn Restaurant Script (PizzaInn_Project) 1.0.0. The vulnerable file is register-exec.php, with user-supplied input in fname, lname, or login allowing arbitrary script/HTML execution when an administrator views registrations. The affe...
Restaurant Script (PizzaInn Project) - Persistent Cross-Site Scripting
Restaurant Script PizzaInn Project - Persistent Cross-Site Scripting Title: Pizza Inn Registration Stored XSS Severity: High CVE-ID: CVE-2014-6619 Release Date: 20 September 2014 Author: Kenneth F. Belva Websites: http://silverbackventuresllc.com http://xssWarrior.com http://securitymaverick.com...
Pizza Inn Registration Cross Site Scripting
Title: Pizza Inn Registration Stored XSS Severity: High CVE-ID: CVE-2014-6619 Release Date: 20 September 2014 Author: Kenneth F. Belva Websites: http://silverbackventuresllc.com http://xssWarrior.com http://securitymaverick.com Twitter: @infosecmaverick Contact: Please use website contact form...
RHEL 6 : MRG (RHSA-2014:0440)
Updated Grid component packages that fix two security issues, multiple bugs, and provide several enhancements are now available for Red Hat Enterprise MRG 2.5 for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common...
Moderate: Red Hat Security Advisory: Red Hat Enterprise MRG Grid 2.5 security, bug fix, and enhancement update
Updated Grid component packages that fix two security issues, multiple bugs, and provide several enhancements are now available for Red Hat Enterprise MRG 2.5 for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common...
CVE-2012-6619
CVE-2012-6619 affects MongoDB earlier than 2.3.2, where the BSON handling allows a crafted column-name in an insert to trigger a buffer over-read, enabling a remote authenticated user to crash the server or read memory. The issue stems from inadequate validation of objects in the default config. ...
Moderate: Red Hat Security Advisory: mongodb security update
Updated mongodb packages that fix one security issue are now available for Red Hat Enterprise Linux OpenStack Platform 4.0. The Red Hat Security Response Team has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...
Updated mongodb package fixes security vulnerability
A possible DoS issue was discovered in MongoDB CVE-2012-6619. The --objcheck command line switch has now been enabled by default in the mongod service as a protective measure...
Fedora Core 9 FEDORA-2009-6619 (rb_libtorrent)
The remote host is missing an update to rblibtorrent announced via advisory FEDORA-2009-6619. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C ...
CVE-2008-6619
CVE-2008-6619 affects ClassSystem 2.3, via an unrestricted file upload vulnerability in class/ApplyDB.php that allows remote attackers to execute arbitrary code by uploading a file with an executable extension and accessing it through a direct request to the file in class/UploadHomepage/. The con...
CVE-2008-6619
creationtimestamp| type| source ---|---|--- 2008-05-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31849...
CVE-2007-6619
CVE-2007-6619 affects Atlassian Jira Enterprise Edition prior to 3.12.1. The Setup Wizard does not properly restrict setup attempts after completion, enabling remote actors to change the default language. The issue is described alongside related vulnerabilities in 3.12.0-era Jira (noted in Nessus...
CVE-2006-6619
CVE-2006-6619 affects AVG Anti-Virus plus Firewall 7.5.431. The vulnerability arises from the product using the Process Environment Block (PEB) to identify a process, allowing a local attacker to bypass the product’s controls by spoofing the PEB fields: ImagePathName, CommandLine, and WindowTitle...