243 matches found
UBUNTU-CVE-2014-8139
Heap-based buffer overflow in the CRC32 verification in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command...
UBUNTU-CVE-2013-7077
Cross-site scripting XSS vulnerability in the Backend User Administration Module in TYPO3 6.0.x before 6.0.12 and 6.1.x before 6.1.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
PT-2007-3877 · Pfa · Pfa Cms
Name of the Vulnerable Software and Affected Versions: pfa CMS version 6.0 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the repinc parameter in the index.php file. However, it's noted that $repinc is set to a constant value before use, which disputes t...