CVE-2012-5905

Buffer overflow in KnFTPd 1.0.0 allows remote authenticated users to cause a denial of service crash via a long string in a FEAT command...

CVE-2012-5910

SQL injection vulnerability in blogs/htsrv/viewfile.php in b2evolution 4.1.3 allows remote authenticated users to execute arbitrary SQL commands via the root parameter...

CVE-2012-5895

Multiple unspecified vulnerabilities in iRODS before 3.1 have unknown impact and attack vectors...

CVE-2012-5901

CVE-2012-5901 affects DFLabs PTK 1.0.5, where data files are stored with predictable names under the web document root. The root cause is insufficient access control, enabling remote attackers to read logs, images, or reports by directly requesting files in the (1) log, (2) images, or (3) report ...

CVE-2012-5908

CVE-2012-5908 is a Cross-site Scripting (XSS) vulnerability in MyBB (MyBulletinBoard) 1.6.6. The issue arises in admin/modules/user/users.php where an attacker can inject arbitrary script or HTML via the conditions[usergroup][] parameter in a search action to admin/index.php. The provided documen...

CVE-2012-5902

The CVE-2012-5902 entry relates to a Cross-site Scripting (XSS) vulnerability in DFLabs PTK 1.0.5, specifically in the file ptk/lib/modal_bookmark.php where arbitrary web script/HTML can be injected via the arg4 parameter. The description consistently identifies the affected component and payload...

CVE-2012-5895

Multiple unspecified vulnerabilities in iRODS before 3.1 have unknown impact and attack vectors...

CVE-2012-5897

The 1 SimpleTree and 2 ReportTree classes in the ARDoc ActiveX control ARDoc.dll in Quest InTrust 10.4.0.853 and earlier do not properly implement the SaveToFile method, which allows remote attackers to write or overwrite arbitrary files via the bstrFileName argument...

CVE-2012-5888

CVE-2012-5888 describes a cross-site scripting (XSS) vulnerability in the TYPO3 extension Basic SEO Features (seo_basics) prior to version 0.8.2. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Public sources cite this vulnerability and provide an...

CVE-2012-5890

The CVE-2012-5890 entry concerns the Front End User Registration (sr_feuser_register) extension for TYPO3, affected up to version 2.6.1. The root cause is a vulnerability in the extension that allows remote attackers to obtain user names and passwords through the edit perspective or autologin fea...

CVE-2012-5894

Summary: CVE-2012-5894 describes a SQL injection in Havalite CMS up to version 1.1.0, via the postId parameter in hava_post.php, enabling remote arbitrary SQL execution. The connected documents consistently identify the affected software as Havalite CMS 1.1.0 and earlier and attribute the issue t...

CVE-2012-5895

Technical details about CVE-2012-5895 are not publicly available in the provided documents. Monitor for updates.

CVE-2012-5896

CVE-2012-5896 affects Quest InTrust, specifically the Annotation Objects ActiveX control (AnnotateX.dll) prior to or at 10.4.0.853. The vulnerability arises from the Add method not being properly implemented, enabling remote code execution via a memory address supplied in the first argument, tied...

CVE-2012-5897

CVE-2012-5897 affects Quest InTrust 10.4.0.853 and earlier via the ARDoc ActiveX control (ARDoc.dll). The (1) SimpleTree and (2) ReportTree classes do not properly implement the SaveToFile method, enabling remote attackers to write or overwrite arbitrary files through the bstrFileName argument. D...

CVE-2012-5898

The CVE-2012-5898 entry describes a CSRF vulnerability in SAMEDIA LandShop 0.9.2 that can allow an attacker to hijack an administrator’s session to issue requests that change account settings. The connected documents confirm the affected product/version and the nature of the vulnerability but do ...

CVE-2012-5904

CVE-2012-5904 describes a heap-based buffer overflow in IrfanView prior to 4.33 that can be triggered by processing a crafted RLE-compressed bitmap (DIB/RLE/BMP). The issue allows remote code execution and arises from the way the application handles RLE bitmap data. Public references (NVD, CVE li...

CVE-2012-5906

GreenBrowser 6.1.0117 and 6.1.0216 are affected by multiple XSS vulnerabilities that allow remote attackers to inject arbitrary script or HTML via (1) the URI in an about: page or (2) the last visited URL in the LastVisitWriteEn function in function.js. CVE-2012-5906. Impact: partial integrity; v...

CVE-2012-5913

The CVE-2012-5913 vulnerability affects the WordPress Integrator plugin (version 1.32) for WordPress, specifically the wp-integrator.php file. The issue is a Cross-Site Scripting (XSS) flaw that allows remote attackers to inject arbitrary script/HTML via the redirect_to parameter to wp-login.php....

CVE-2012-5892

The CVE-2012-5892 entry pertains to Havalite CMS 1.1.0 and earlier, where improper access control allows remote attackers to download the configuration database (data/havalite.db3) from the web root. The root cause is insecure storage of sensitive data under the web root, enabling direct requests...

CVE-2012-5910

SQL injection vulnerability in blogs/htsrv/viewfile.php in b2evolution 4.1.3 allows remote authenticated users to execute arbitrary SQL commands via the root parameter...