CVE-2015-7153

...

CVE-2016-7153

The HTTP/2 protocol does not consider the role of the TCP congestion window in providing information about content length, which makes it easier for remote attackers to obtain cleartext data by leveraging a web-browser configuration in which third-party cookies are sent, aka a "HEIST" attack...

CVE-2016-7153

CVE-2016-7153 describes a vulnerability in the HTTP/2 protocol where the TCP congestion window is not considered when determining content length, potentially enabling an attacker to obtain cleartext data by leveraging a web browser configuration that sends third‑party cookies (HEIST). The connect...

Schneider Electric Modicon TSX Micro PLC Detection

Binary data 7153.pasl...

CVE-2014-7153

SQL injection vulnerability in the editgallery function in admin/galleryfunc.php in the Huge-IT Image Gallery plugin 1.0.1 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the removeslide parameter to wp-admin/admin.php...

CVE-2014-7153

SQL injection vulnerability in the editgallery function in admin/galleryfunc.php in the Huge-IT Image Gallery plugin 1.0.1 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the removeslide parameter to wp-admin/admin.php...

CVE-2014-7153

The CVE-2014-7153 affects the WordPress Huge-IT Image Gallery plugin (version 1.0.1) via a SQL injection in admin/gallery_func.php: editgallery, exploitable by remote authenticated users through the removeslide parameter to wp-admin/admin.php. Root cause is unsafe SQL construction in the removesl...

CVE-2008-7153

SQL injection vulnerability in the autoDetectRegion function in doceboCore/lib/lib.regset.php in Docebo 3.5.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the Accept-Language HTTP header. NOTE: this can be leveraged to execute arbitrary PHP code using the INTO...

CVE-2008-7153

The CVE-2008-7153 entry describes a SQL injection in Docebo: the autoDetectRegion function in doceboCore/lib/lib.regset.php affects Docebo 3.5.0.3 and earlier, enabling remote attackers to execute arbitrary SQL via the Accept-Language HTTP header. The advisory notes this could be leveraged to run...

CVE-2006-7153

CVE-2006-7153 is a PHP remote file inclusion vulnerability in MiniBB Forum 2 (index.php) that allows an attacker to execute arbitrary code by supplying a URL in the pathToFiles parameter. The issue enables remote code execution with network access, with CVSS v2 base score 10.0 (HIGH) and impact o...