68 matches found
PT-2017-10894
Name of the Vulnerable Software and Affected Versions October CMS build 412 Description The issue allows for file path modification in the asset move functionality, potentially resulting in the creation of malicious files on the server. Recommendations For October CMS build 412, update to a versi...
CVE-2017-1000197: Undefined Security Weakness
October CMS build 412 is vulnerable to file path modification in asset move functionality resulting in creating creating malicious files on the server...
CVE-2012-2244
Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote authenticated administrators to execute arbitrary programs by modifying the path to clamav. NOTE: this can be exploited without authentication by leveraging CVE-2012-2243...
PT-2012-3903
Name of the Vulnerable Software and Affected Versions Mahara versions 1.4.x through 1.4.4 Mahara versions 1.5.x through 1.5.3 Description The issue allows remote authenticated administrators to execute arbitrary programs by modifying the path to clamav. It can also be exploited without...
Le tour travel site management system v1. 7. 3 Oday-vulnerability warning-the black bar safety net
Author:Lan3a First: The administrator directory under AdminPassod. asp !-- include file="../Include/conn. asp" - !-- include file="../Include/md5. asp" - % select case request. QueryString"Action" case "ModifyPass" SaveNewPass case else end select set rs = server. createobject"adodb. recordset"...
Fedora Core 10 FEDORA-2009-2651 (pdfjam)
The remote host is missing an update to pdfjam announced via advisory FEDORA-2009-2651. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
CVE-2005-3270: Undefined Security Weakness
Untrusted search path vulnerability in DiskMountNotify for Symantec Norton AntiVirus 9.0.3 allows local users to gain privileges by modifying the PATH to reference a malicious 1 ps or 2 grep file...
CVE-2002-2221
Untrusted search path vulnerability in Pedro Lineu Orso chetcpasswd 2.4.1 and earlier allows local users to gain privileges via a modified PATH that references a malicious cp binary. NOTE: this issue might overlap CVE-2006-6639...