Lucene search
+L

1134 matches found

CVE
CVE
added 2008/03/28 12:0 a.m.49 views

CVE-2008-1533

CVE-2008-1533 affects Joomla! 1.5 via the XML-RPC Blogger API plugin. The vulnerability allows remote attackers to perform unauthorized article operations on articles through unknown vectors. The public description lacks concrete exploit details or affected versions beyond Joomla! 1.5 and the plu...

6.8CVSS6.6AI score0.01165EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2008/03/28 12:0 a.m.18 views

CVE-2008-1533

Unspecified vulnerability in the XML-RPC Blogger API plugin in Joomla! 1.5 allows remote attackers to perform unauthorized article operations on articles via unknown vectors...

6.6AI score0.01165EPSS
SaveExploits0References4
Prion
Prion
added 2008/03/24 10:44 p.m.15 views

Design/Logic Flaw

The xml-rpc server in Roundup 1.4.4 does not check property permissions, which allows attackers to bypass restrictions and edit or read restricted properties via the 1 list, 2 display, and 3 set methods...

6.4CVSS6.8AI score0.01743EPSS
SaveExploits0References14Affected Software1
OSV
OSV
added 2008/03/24 10:44 p.m.29 views

PYSEC-2008-10

The xml-rpc server in Roundup 1.4.4 does not check property permissions, which allows attackers to bypass restrictions and edit or read restricted properties via the 1 list, 2 display, and 3 set methods...

6.4CVSS5.5AI score0.01743EPSS
SaveExploits0References15
NVD
NVD
added 2008/03/24 10:44 p.m.18 views

CVE-2008-1475

The xml-rpc server in Roundup 1.4.4 does not check property permissions, which allows attackers to bypass restrictions and edit or read restricted properties via the 1 list, 2 display, and 3 set methods...

6.4CVSS6.3AI score0.01743EPSS
SaveExploits0References14
UbuntuCve
UbuntuCve
added 2008/03/24 10:44 p.m.27 views

CVE-2008-1475

The xml-rpc server in Roundup 1.4.4 does not check property permissions, which allows attackers to bypass restrictions and edit or read restricted properties via the 1 list, 2 display, and 3 set methods...

6.4CVSS5.9AI score0.01743EPSS
SaveExploits0References1
CVE
CVE
added 2008/03/24 10:0 p.m.55 views

CVE-2008-1475

CVE-2008-1475 concerns the xml-rpc server in Roundup 1.4.4, which does not check property permissions, allowing attackers to bypass restrictions and read or edit restricted properties via the (1) list, (2) display, and (3) set methods. The connected documents corroborate the same description and ...

6.4CVSS6.1AI score0.01743EPSS
SaveExploits0References14Affected Software1
Cvelist
Cvelist
added 2008/03/24 10:0 p.m.72 views

CVE-2008-1475

The xml-rpc server in Roundup 1.4.4 does not check property permissions, which allows attackers to bypass restrictions and edit or read restricted properties via the 1 list, 2 display, and 3 set methods...

6.1AI score0.01743EPSS
SaveExploits0References14
NVD
NVD
added 2008/02/08 2:0 a.m.16 views

CVE-2008-0664

The XML-RPC implementation xmlrpc.php in WordPress before 2.3.3, when registration is enabled, allows remote attackers to edit posts of other blog users via unknown vectors...

6.4CVSS6.4AI score0.03553EPSS
SaveExploits1References12
OSV
OSV
added 2008/02/08 2:0 a.m.10 views

CVE-2008-0664

The XML-RPC implementation xmlrpc.php in WordPress before 2.3.3, when registration is enabled, allows remote attackers to edit posts of other blog users via unknown vectors...

6.3AI score
SaveExploits0References12
UbuntuCve
UbuntuCve
added 2008/02/08 2:0 a.m.21 views

CVE-2008-0664

The XML-RPC implementation xmlrpc.php in WordPress before 2.3.3, when registration is enabled, allows remote attackers to edit posts of other blog users via unknown vectors...

6.4CVSS5.9AI score0.03553EPSS
SaveExploits1References1
Prion
Prion
added 2008/02/08 2:0 a.m.15 views

Information disclosure

The XML-RPC implementation xmlrpc.php in WordPress before 2.3.3, when registration is enabled, allows remote attackers to edit posts of other blog users via unknown vectors...

6.4CVSS6.9AI score0.03553EPSS
SaveExploits1References12Affected Software1
Debian CVE
Debian CVE
added 2008/02/08 1:0 a.m.59 views

CVE-2008-0664

The XML-RPC implementation xmlrpc.php in WordPress before 2.3.3, when registration is enabled, allows remote attackers to edit posts of other blog users via unknown vectors...

6.4CVSS6.1AI score0.03553EPSS
SaveExploits1
CVE
CVE
added 2008/02/08 1:0 a.m.73 views

CVE-2008-0664

WordPress before 2.3.3 with registration enabled is vulnerable through the XML-RPC implementation (xmlrpc.php), allowing remote attackers to edit posts of other blog users. This CVE (CVE-2008-0664) is documented in multiple sources (e.g., Debian DSA-1601-1) with a base CVSS v2 score of 6.4 (Mediu...

6.4CVSS6.2AI score0.03553EPSS
SaveExploits1References12Affected Software1
Cvelist
Cvelist
added 2008/02/08 1:0 a.m.35 views

CVE-2008-0664

The XML-RPC implementation xmlrpc.php in WordPress before 2.3.3, when registration is enabled, allows remote attackers to edit posts of other blog users via unknown vectors...

6.3AI score0.03553EPSS
SaveExploits1References12
Tenable Nessus
Tenable Nessus
added 2008/02/08 12:0 a.m.16 views

WordPress < 2.3.3 XML-RPC Unauthenticated Post Modification

Binary data 4364.prm...

6.4CVSS7.3AI score0.03553EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2008/01/17 12:0 a.m.22 views

Debian Security Advisory DSA 666-1 (python2.2)

The remote host is missing an update to python2.2 announced via advisory DSA 666-1. OpenVAS Vulnerability Test $Id: deb6661.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 666-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

7.5CVSS0.5AI score0.06141EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2008/01/17 12:0 a.m.61 views

Debian Security Advisory DSA 789-1 (php4)

The remote host is missing an update to php4 announced via advisory DSA 789-1. Several security related problems have been found in PHP4, the server-side, HTML-embedded scripting language. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2005-1751 Eric Roman...

7.5CVSS0.1AI score0.79071EPSS
SaveExploits8
OpenVAS
OpenVAS
added 2008/01/17 12:0 a.m.42 views

Debian Security Advisory DSA 842-1 (egroupware)

The remote host is missing an update to egroupware announced via advisory DSA 842-1. Stefan Esser discovered a vulnerability in the XML-RPC libraries which are also present in egroupware, a web-based groupware suite, that allows injection of arbitrary PHP code into eval statements. The old stable...

5CVSS1AI score0.05091EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2008/01/17 12:0 a.m.33 views

Debian Security Advisory DSA 798-1 (phpgroupware)

The remote host is missing an update to phpgroupware announced via advisory DSA 798-1. Several vulnerabilities have been discovered in phpgroupware, a web based groupware system written in PHP. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2005-2498 Stefa...

5CVSS9.9AI score0.05091EPSS
SaveExploits0
Rows per page
Query Builder