CVE-2014-7056

CVE-2014-7056 affects the Android application “The Yeast Infection” (package com.wyeastinfectionapp) version 0.1. The issue is that the app does not verify X.509 certificates when connecting to SSL servers, which enables MITM attackers to spoof servers and potentially obtain sensitive information...

SuSE 10 Security Update : clamav (ZYPP Patch Number 7056)

This update fixes the following security issues in clamav that can be used as a remote denial of service attack : - An off-by-one buffer overflow. CVE-2010-1640 - A crash while parsing PDFs CVE-2010-1639 / CVE-2010-2077 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of...

CVE-2008-7056

BandSite CMS 1.1.4 is affected by CVE-2008-7056 due to missing access control on adminpanel/phpmydump.php, enabling remote attackers to directly request the file and obtain copies of the database. This is documented across NVD/NVD-CVE records and related CVE aggregations. The available descriptio...

CVE-2006-7056

CVE-2006-7056 describes multiple PHP remote file inclusion vulnerabilities in DreamCost HostAdmin 3.1 and earlier. The vulnerability allows remote attackers to execute arbitrary PHP code by supplying a URL in the path parameter to (1) functions.php and (2) members.php. The index.php vector is cov...