45 matches found
CVE-2008-6689
CVE-2008-6689 concerns a SQL injection vulnerability in the JobControl (dmmjobcontrol) TYPO3 extension, affecting version 1.15.0 and earlier. The vulnerability allows remote attackers to execute arbitrary SQL commands via unknown vectors. Based on the connected sources, there are public reference...
FreeBSD Ports: gallery2
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2007-6689
CVE-2007-6689 affects Menalto Gallery prior to version 2.2.4. The vulnerability arises because file upload handling does not properly validate malicious file extensions in the Core application or MIME module, enabling an attacker to execute arbitrary code on the server. Official advisories (Red H...
CVE-2007-5437
The web console in CA formerly Computer Associates eTrust ITM Threat Manager 8.1 allows remote attackers to redirect users to arbitrary web sites via a crafted HTTP URL on port 6689...
CVE-2006-6689
CVE-2006-6689 and CVE-2006-6739 pertain to Paristemi 0.8.3 and earlier. CVE-2006-6689 describes multiple PHP remote file inclusion vulnerabilities allowing arbitrary code execution via a URL in the SERVER_DIRECTORY parameter to unspecified scripts (notably different from CVE-2006-6739). CVE-2006-...