9 matches found
CVE-2022-29806
CVE-2022-29806 ZoneMinder 1.36.12까지의 언어 권한 상승 및 RCE 설명 ZoneMinder 1.36.13 및 1.37.11 이전 버전의 디버그 로그 파일과 기본 언어 옵션에 있는 경로 순회 취약점으로 인해 공격자가 임의 코드를 작성하고 실행하여 원격 명령 실행을 달성할 수 있습니다. "개념 증명은 ZoneMinder 1.36.4 ubuntu18.04 docker: ZoneMinder/zmdockerfiles에서 테스트되었지만 최신 버전 1.36.12까지 여전히 적용 가능합니다." 사용법...
SUSE CVE-2005-4031
Eval injection vulnerability in MediaWiki 1.5.x before 1.5.3 allows remote attackers to execute arbitrary PHP code via the "user language option," which is used as part of a dynamic class name that is processed using the eval function...
Tor: Preferred language option fingerprinting issue in Tor Browser
I'm not so sure if this is an in-scope issue or by-design. But based on my understanding of 1, I feel that Tor doesn't want to make user configuration details of Tor Browser detectable by websites. But in about:preferencescontent, there's a "Languages" section that allows users to "choose your...
WordPress A Page Flip Book Plugin for WordPress 'pageflipbook_language' Parameter Arbitrary Code Execution
The version of the 'A Page Flip Book' plugin for WordPress installed on the remote host is affected by an arbitrary code execution vulnerability due to a failure to properly sanitize user-supplied input to the 'pageflipbooklanguage' parameter in the pageflipbook.php script. An unauthenticated,...
CVE-2005-4031
Eval injection vulnerability in MediaWiki 1.5.x before 1.5.3 allows remote attackers to execute arbitrary PHP code via the "user language option," which is used as part of a dynamic class name that is processed using the eval function...
CVE-2005-4031
Eval injection vulnerability in MediaWiki 1.5.x before 1.5.3 allows remote attackers to execute arbitrary PHP code via the "user language option," which is used as part of a dynamic class name that is processed using the eval function...
CVE-2003-0385
Buffer overflow in xaos 3.0-23 and earlier, when running setuid, allows local users to gain root privileges via a long -language option...
