Lucene search
+L

2906 matches found

UbuntuCve
UbuntuCve
added 2005/12/06 11:03 a.m.49 views

CVE-2005-4031

Eval injection vulnerability in MediaWiki 1.5.x before 1.5.3 allows remote attackers to execute arbitrary PHP code via the "user language option," which is used as part of a dynamic class name that is processed using the eval function...

7.5CVSS6.2AI score0.03226EPSS
SaveExploits0References1
NVD
NVD
added 2005/12/06 11:03 a.m.21 views

CVE-2005-4031

Eval injection vulnerability in MediaWiki 1.5.x before 1.5.3 allows remote attackers to execute arbitrary PHP code via the "user language option," which is used as part of a dynamic class name that is processed using the eval function...

7.5CVSS7.6AI score0.03226EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2005/12/06 11:00 a.m.68 views

CVE-2005-4031

Eval injection vulnerability in MediaWiki 1.5.x before 1.5.3 allows remote attackers to execute arbitrary PHP code via the "user language option," which is used as part of a dynamic class name that is processed using the eval function...

7.5CVSS7.7AI score0.03226EPSS
SaveExploits0
CVE
CVE
added 2005/12/06 11:00 a.m.72 views

CVE-2005-4031

MediaWiki 1.5.x is affected by an Eval injection vulnerability before 1.5.3 that allows remote attackers to execute arbitrary PHP code via the user language option, which is used to form a dynamic class name processed by eval. Root cause: improper handling of user-supplied language selection lead...

7.5CVSS7.7AI score0.03226EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2005/12/06 11:00 a.m.36 views

CVE-2005-4031

Eval injection vulnerability in MediaWiki 1.5.x before 1.5.3 allows remote attackers to execute arbitrary PHP code via the "user language option," which is used as part of a dynamic class name that is processed using the eval function...

7.6AI score0.03226EPSS
SaveExploits0References5
CVE
CVE
added 2005/12/04 10:00 p.m.79 views

CVE-2004-2631

CVE-2004-2631 affects phpMyAdmin 2.5.1–2.5.7, where LeftFrameLight being FALSE enables eval injection in left.php, allowing remote attackers to execute arbitrary PHP code via a crafted table name. The issue is rated CVSS v2 base 7.5 (Network, Low attack complexity, no authentication). Connected a...

7.5CVSS7.5AI score0.09353EPSS
SaveExploits2References12Affected Software1
Debian CVE
Debian CVE
added 2005/12/04 10:00 p.m.46 views

CVE-2004-2631

Eval injection vulnerability in left.php in phpMyAdmin 2.5.1 up to 2.5.7, when LeftFrameLight is FALSE, allows remote attackers to execute arbitrary PHP code via a crafted table name...

7.5CVSS7.6AI score0.09353EPSS
SaveExploits2
NVD
NVD
added 2005/11/26 2:03 a.m.26 views

CVE-2005-3823

The Users module in vTiger CRM 4.2 and earlier allows remote attackers to execute arbitrary PHP code via an arbitrary file in the templatename parameter, which is passed to the eval function...

7.5CVSS7.7AI score0.01705EPSS
SaveExploits0References6
CVE
CVE
added 2005/11/26 2:00 a.m.57 views

CVE-2005-3823

CVE-2005-3823 affects vTiger CRM 4.2 and earlier. The Users module allows remote attackers to execute arbitrary PHP code via an arbitrary file in the templatename parameter, which is passed to eval. The connected sources provide no explicit remediation details; update/patch information is not inc...

7.5CVSS7.7AI score0.01705EPSS
SaveExploits0References6Affected Software1
NVD
NVD
added 2005/11/16 7:42 a.m.27 views

CVE-2005-3554

Multiple eval injection vulnerabilities in the help function in PHPKIT 1.6.1 R2 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary code on the server via unknown attack vectors involving uninitialized variables...

5.1CVSS7.9AI score0.03407EPSS
SaveExploits1References8
Cvelist
Cvelist
added 2005/11/16 7:37 a.m.37 views

CVE-2005-3554

Multiple eval injection vulnerabilities in the help function in PHPKIT 1.6.1 R2 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary code on the server via unknown attack vectors involving uninitialized variables...

7.9AI score0.03407EPSS
SaveExploits1References8
CVE
CVE
added 2005/11/16 7:37 a.m.55 views

CVE-2005-3554

CVE-2005-3554 describes multiple eval-injection vulnerabilities in the help function of PHP-Kit up to version 1.6.1 R2, triggered when register_globals is enabled. Remote attackers could execute arbitrary code on the server via uninitialized variables. The description notes unknown attack vectors...

5.1CVSS7.9AI score0.03407EPSS
SaveExploits1References8Affected Software1
Cvelist
Cvelist
added 2005/11/01 11:00 a.m.30 views

CVE-2005-3405

ATutor 1.4.1 through 1.5.1-pl1 allows remote attackers to execute arbitrary PHP functions via a direct request to forum.inc.php with a modified addslashes parameter with either the 1 asc or 2 desc parameters set, possibly due to an eval injection vulnerability...

7.8AI score0.08074EPSS
SaveExploits2References8
CVE
CVE
added 2005/11/01 11:00 a.m.50 views

CVE-2005-3405

ATutor

7.5CVSS7.8AI score0.08074EPSS
SaveExploits2References8
UbuntuCve
UbuntuCve
added 2005/10/24 10:02 a.m.36 views

CVE-2005-3302

Eval injection vulnerability in bvhimport.py in Blender 2.36 allows attackers to execute arbitrary Python code via a hierarchy element in a .bvh file, which is supplied to an eval function call...

7.5CVSS6.2AI score0.03884EPSS
SaveExploits2References1
OSV
OSV
added 2005/10/24 10:02 a.m.13 views

DEBIAN-CVE-2005-3302

Eval injection vulnerability in bvhimport.py in Blender 2.36 allows attackers to execute arbitrary Python code via a hierarchy element in a .bvh file, which is supplied to an eval function call...

7.3CVSS7.7AI score0.03884EPSS
SaveExploits2References1
CVE
CVE
added 2005/10/24 4:00 a.m.83 views

CVE-2005-3302

CVE-2005-3302 is an eval-injection vulnerability in Blender 2.36 (bvh_import.py) that lets an attacker execute arbitrary Python code via a hierarchy element in a .bvh file fed to an eval(). The issue arises from missing input validation in the Blender importer. Impact described in sources include...

7.5CVSS7.3AI score0.03884EPSS
SaveExploits2References4Affected Software1
Debian CVE
Debian CVE
added 2005/10/24 4:00 a.m.57 views

CVE-2005-3302

Eval injection vulnerability in bvhimport.py in Blender 2.36 allows attackers to execute arbitrary Python code via a hierarchy element in a .bvh file, which is supplied to an eval function call...

7.5CVSS7.5AI score0.03884EPSS
SaveExploits2
Cvelist
Cvelist
added 2005/10/24 4:00 a.m.37 views

CVE-2005-3302

Eval injection vulnerability in bvhimport.py in Blender 2.36 allows attackers to execute arbitrary Python code via a hierarchy element in a .bvh file, which is supplied to an eval function call...

7.3AI score0.03884EPSS
SaveExploits2References4
Vulnrichment
Vulnrichment
added 2005/10/24 4:00 a.m.12 views

CVE-2005-3302

Eval injection vulnerability in bvhimport.py in Blender 2.36 allows attackers to execute arbitrary Python code via a hierarchy element in a .bvh file, which is supplied to an eval function call...

8.1AI score0.03884EPSS
SaveExploits2References4
Rows per page
Query Builder