8633 matches found
Code injection
Static code injection vulnerability in addreg.php in DB Top Sites 1.0 allows remote attackers to inject arbitrary PHP code via a crafted 1 url and 2 location parameter...
CVE-2009-2111
Static code injection vulnerability in addreg.php in DB Top Sites 1.0 allows remote attackers to inject arbitrary PHP code via a crafted 1 url and 2 location parameter...
CVE-2009-2111
CVE-2009-2111 affects DB Top Sites 1.0, with a vulnerability in the file add_reg.php that allows static code injection . A remote attacker can inject arbitrary PHP code by supplying crafted parameters for the (1) url and (2) location, enabling code execution on the affected system. This is docume...
Solaris Update for /usr/sbin/static/rcp 110671-04
Check for the Version of /usr/sbin/static/rcp OpenVAS Vulnerability Test Solaris Update for /usr/sbin/static/rcp 110671-04 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...
Solaris Update for /usr/sbin/static/rcp 110670-04
Check for the Version of /usr/sbin/static/rcp OpenVAS Vulnerability Test Solaris Update for /usr/sbin/static/rcp 110670-04 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...
Solaris Update for /usr/sbin/static/rcp 110670-04
Check for the Version of /usr/sbin/static/rcp OpenVAS Vulnerability Test Solaris Update for /usr/sbin/static/rcp 110670-04 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...
Solaris Update for /usr/sbin/static/rcp 110671-04
Check for the Version of /usr/sbin/static/rcp OpenVAS Vulnerability Test Solaris Update for /usr/sbin/static/rcp 110671-04 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...
[SECURITY] Fedora 11 Update: jetty-5.1.15-4.fc11
Jetty is a 100% Java HTTP Server and Servlet Container. This means that you do not need to configure and run a separate web server like Apache in order to use java, servlets and JSPs to generate dynamic content. Jetty is a fully featured web server for static and dynamic content. Unlike separate...
[SECURITY] Fedora 9 Update: jetty-5.1.15-3.fc9
Jetty is a 100% Java HTTP Server and Servlet Container. This means that you do not need to configure and run a separate web server like Apache in order to use java, servlets and JSPs to generate dynamic content. Jetty is a fully featured web server for static and dynamic content. Unlike separate...
Mandrake Security Advisory MDVSA-2009:115 (phpMyAdmin)
The remote host is missing an update to phpMyAdmin announced via advisory MDVSA-2009:115. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...
Mandrake Security Advisory MDVSA-2009:115 (phpMyAdmin)
The remote host is missing an update to phpMyAdmin announced via advisory MDVSA-2009:115. OpenVAS Vulnerability Test $Id: mdksa2009115.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:115 phpMyAdmin Authors: Thomas Reinke Copyright: Copyright c 2009...
Armorlogic Profense Web Application Firewall multiple security vulnerabilities
Protection bypass, static default password...
Fedora Core 9 FEDORA-2009-5118 (giflib)
The remote host is missing an update to giflib announced via advisory FEDORA-2009-5118. OpenVAS Vulnerability Test $Id: fcore20095118.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-5118 giflib Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...
Fedora 9 : giflib-4.1.3-10.fc9 (2009-5118)
CVE-2005-2974: NULL pointer dereference crash 494826 - CVE-2005-3350: Memory corruption via a crafted GIF 494823 - Solved multilib problems with documentation 465208, 474538 - Removed static library from giflib-devel package 225796 c1 Note that Tenable Network Security has extracted the preceding...
Code injection
Multiple static code injection vulnerabilities in the saveFeed function in rss/feedcreator.class.php in Bitweaver 2.6 and earlier allow 1 remote authenticated users to inject arbitrary PHP code into files by placing PHP sequences into the account's "display name" setting and then invoking...
CVE-2009-1512
Static code injection vulnerability in X-Forum 0.6.2 allows remote authenticated administrators to inject arbitrary PHP code into Config.php via the adminEMail parameter to SaveConfig.php...
Code injection
Static code injection vulnerability in user/internettoolbar/edit.php in YourPlace 1.0.2 and earlier allows remote authenticated users to execute arbitrary PHP code into user/internettoolbar/index.php via the 1 fav1url, 2 fav1name, 3 fav2url, 4 fav2name, 5 fav3url, 6 fav3name, 7 fav4url, 8 fav4nam...
CVE-2008-6773
Static code injection vulnerability in user/internettoolbar/edit.php in YourPlace 1.0.2 and earlier allows remote authenticated users to execute arbitrary PHP code into user/internettoolbar/index.php via the 1 fav1url, 2 fav1name, 3 fav2url, 4 fav2name, 5 fav3url, 6 fav3name, 7 fav4url, 8 fav4nam...
CVE-2008-6773
The CVE-2008-6773 entry concerns YourPlace 1.0.2 and earlier, where a static code injection flaw in user/internettoolbar/edit.php allows remote authenticated users to execute arbitrary PHP via 10 fav parameters, resulting in partial impact to confidentiality, integrity, and availability. The root...
CVE-2008-6773: Improper Control of Generation of Code
Static code injection vulnerability in user/internettoolbar/edit.php in YourPlace 1.0.2 and earlier allows remote authenticated users to execute arbitrary PHP code into user/internettoolbar/index.php via the 1 fav1url, 2 fav1name, 3 fav2url, 4 fav2name, 5 fav3url, 6 fav3name, 7 fav4url, 8 fav4nam...