CVE-2008-6708

Unspecified vulnerability in the Web management interface in Avaya SIP Enablement Services SES 3.x and 4.0, as used with Avaya Communication Manager 3.1.x and 4.x, allows remote authenticated administrators to gain root privileges via unknown vectors related to configuration of "data viewing or...

Partial space admin permission/authority

panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Cloud. Using Confluence Server? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFSERVER-15172. panel I followed these guidelines, but this is not fine grained enough...

Partial space admin permission/authority

panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Server. Using Confluence Cloud? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFCLOUD-15172. panel I followed these guidelines, but this is not fine grained enough...

CVE-2008-6658

Directory traversal vulnerability in index.php in Simple Machines Forum SMF 1.0 before 1.0.15 and 1.1 before 1.1.7 allows remote authenticated administrators to install packages from arbitrary directories via a .. dot dot in the package parameter during an install2 action, as demonstrated by a...

Directory traversal

Directory traversal vulnerability in index.php in Simple Machines Forum SMF 1.0 before 1.0.15 and 1.1 before 1.1.7 allows remote authenticated administrators to install packages from arbitrary directories via a .. dot dot in the package parameter during an install2 action, as demonstrated by a...

CVE-2008-6658

CVE-2008-6658 affects Simple Machines Forum (SMF): directory traversal in index.php allows remote authenticated administrators to install packages from arbitrary directories via package parameter during install2, affecting SMF 1.0.x prior to 1.0.15 and SMF 1.1.x prior to 1.1.7. Impact per descrip...

CVE-2008-6641

Multiple SQL injection vulnerabilities in Shader TV Beta allow remote authenticated administrators to execute arbitrary SQL commands via the sid parameter to 1 kanal.asp, 2 google.asp, and 3 hakk.asp in yonet/; and allow remote attackers to execute arbitrary SQL commands via the 4 username or 5...

CVE-2008-6639

Cross-site request forgery CSRF vulnerability in admin.php in AjaXplorer 2.3.3 and 2.3.4 allows remote attackers to hijack the authentication of administrators for requests that modify passwords via the updateuserpwd action...

Sql injection

Multiple SQL injection vulnerabilities in Shader TV Beta allow remote authenticated administrators to execute arbitrary SQL commands via the sid parameter to 1 kanal.asp, 2 google.asp, and 3 hakk.asp in yonet/; and allow remote attackers to execute arbitrary SQL commands via the 4 username or 5...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in admin.php in AjaXplorer 2.3.3 and 2.3.4 allows remote attackers to hijack the authentication of administrators for requests that modify passwords via the updateuserpwd action...

CVE-2008-6614

Multiple SQL injection vulnerabilities in microcms-admin-login.php in Implied By Design IBD Micro CMS 3.5 aka 0.3.5 allow remote attackers to execute arbitrary SQL commands via 1 the administratorsusername parameter aka the Username field or 2 the administratorspass parameter aka the Password fie...

CVE-2008-6585

Cross-site request forgery CSRF vulnerability in html/admin.php in TorrentFlux 2.3 allows remote attackers to hijack the authentication of administrators for requests that add new accounts via the addUser action...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in gui/index.php in µTorrent uTorrent WebUI 0.315 allows remote attackers to 1 hijack the authentication of users for requests that force the download of arbitrary torrent files via the add-url action and 2 hijack the authentication of administrators...

CVE-2008-6586

Cross-site request forgery CSRF vulnerability in gui/index.php in µTorrent uTorrent WebUI 0.315 allows remote attackers to 1 hijack the authentication of users for requests that force the download of arbitrary torrent files via the add-url action and 2 hijack the authentication of administrators...

CVE-2008-6585

Cross-site request forgery CSRF vulnerability in html/admin.php in TorrentFlux 2.3 allows remote attackers to hijack the authentication of administrators for requests that add new accounts via the addUser action...

Code injection

Unspecified vulnerability in the Skin Manager in DotNetNuke before 4.8.2 allows remote authenticated administrators to perform "server-side execution of application logic" by uploading a static file that is converted into a dynamic script via unknown vectors related to HTM or HTML files...

Unrestricted file upload

Unrestricted file upload vulnerability in the file manager module in DotNetNuke before 4.8.2 allows remote administrators to upload arbitrary files and gain privileges to the server via unspecified vectors...

Code injection

Static code injection vulnerability in user/settings/ in DeStar 0.2.2-5 allows remote authenticated users to add arbitrary administrators and inject arbitrary Python code into destarcfg.py via a crafted pin parameter...

CVE-2008-6539

Static code injection vulnerability in user/settings/ in DeStar 0.2.2-5 allows remote authenticated users to add arbitrary administrators and inject arbitrary Python code into destarcfg.py via a crafted pin parameter...

CVE-2008-6539

Static code injection vulnerability in user/settings/ in DeStar 0.2.2-5 allows remote authenticated users to add arbitrary administrators and inject arbitrary Python code into destarcfg.py via a crafted pin parameter...