CVE-2021-40097

An issue was discovered in Concrete CMS through 8.5.5. Authenticated path traversal leads to to remote code execution via uploaded PHP code, related to the bFilename parameter...

CVE-2021-40097

An issue was discovered in Concrete CMS through 8.5.5. Authenticated path traversal leads to to remote code execution via uploaded PHP code, related to the bFilename parameter...

Path traversal

An issue was discovered in Concrete CMS through 8.5.5. Authenticated path traversal leads to to remote code execution via uploaded PHP code, related to the bFilename parameter...

CVE-2021-40097

An issue was discovered in Concrete CMS through 8.5.5. Authenticated path traversal leads to to remote code execution via uploaded PHP code, related to the bFilename parameter...

CVE-2021-40097

Concrete CMS up to version 8.5.5 is affected by an authenticated path traversal leading to remote code execution via uploaded PHP code, related to the bFilename parameter. Several sources (NVD/OSV/OpenVAS CNVD) corroborate that concrete/cms 8.5.x prior to 8.5.6 are vulnerable due to a path traver...

CVE-2021-40097: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in Concrete CMS through 8.5.5. Authenticated path traversal leads to to remote code execution via uploaded PHP code, related to the bFilename parameter...

CVE-2003-0096

Multiple buffer overflows in Oracle 9i Database release 2, Release 1, 8i, 8.1.7, and 8.0.6 allow remote attackers to execute arbitrary code via 1 a long conversion string argument to the TOTIMESTAMPTZ function, 2 a long time zone argument to the TZOFFSET function, or 3 a long DIRECTORY parameter ...

CVE-2003-0096: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in Oracle 9i Database release 2, Release 1, 8i, 8.1.7, and 8.0.6 allow remote attackers to execute arbitrary code via 1 a long conversion string argument to the TOTIMESTAMPTZ function, 2 a long time zone argument to the TZOFFSET function, or 3 a long DIRECTORY parameter ...

Oracle bfilename function buffer overflow vulnerability (#NISR16022003e)

NGSSoftware Insight Security Research Advisory Name: ORACLE bfilename function buffer overflow vulnerability Systems Affected: All platforms; Oracle9i Database Release 2, 9i Release 1, 8i, 8.1.7, 8.0.6 Severity: High Risk Category: Remote System Buffer Overrun Vendor URL: http://www.oracle.com...