1297 matches found
Sql injection
Eval injection vulnerability in the Digest module before 1.17 for Perl allows context-dependent attackers to execute arbitrary commands via the new constructor...
CVE-2011-3597
Eval injection vulnerability in the Digest module before 1.17 for Perl allows context-dependent attackers to execute arbitrary commands via the new constructor...
CVE-2011-3597
Eval injection vulnerability in the Digest module before 1.17 for Perl allows context-dependent attackers to execute arbitrary commands via the new constructor...
CVE-2011-3597
CVE-2011-3597 is an eval-injection vulnerability in the Perl Digest module (before 1.17). The vulnerability allows context-dependent attackers to execute arbitrary commands via the module’s new constructor. Affected component: Digest module for Perl; root cause described as improper handling/unsa...
CVE-2011-3597
Eval injection vulnerability in the Digest module before 1.17 for Perl allows context-dependent attackers to execute arbitrary commands via the new constructor...
CVE-2011-3597: Improper Input Validation
Eval injection vulnerability in the Digest module before 1.17 for Perl allows context-dependent attackers to execute arbitrary commands via the new constructor...
Perl Digest improper control of generation of code
Eval injection vulnerability in the Digest module before 1.17 for Perl allows context-dependent attackers to execute arbitrary commands via the new constructor...
Perl Digest improper control of generation of code
Eval injection vulnerability in the Digest module before 1.17 for Perl allows context-dependent attackers to execute arbitrary commands via the new constructor...
PT-2012-1726
Name of the Vulnerable Software and Affected Versions Digest module versions prior to 1.17 Description The issue allows context-dependent attackers to execute arbitrary commands via the new constructor. This is related to an eval injection vulnerability in the Digest module for Perl...
CVE-2011-1760
utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to conduct eval injection attacks and gain privileges via shell metacharacters in the -e argument...
Design/Logic Flaw
utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to conduct eval injection attacks and gain privileges via shell metacharacters in the -e argument...
CVE-2011-1760
CVE-2011-1760 affects utils/opcontrol in OProfile 0.9.6 and earlier. The root cause is an eval injection possibility via shell metacharacters in the -e argument, enabling local users to gain privileges. Reports in connected documents confirm impact on affected distributions (e.g., EulerOS advisor...
CVE-2011-1760: Improper Control of Generation of Code
utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to conduct eval injection attacks and gain privileges via shell metacharacters in the -e argument...
PT-2011-3354
Name of the Vulnerable Software and Affected Versions OProfile versions 0.9.6 and earlier Description The issue allows local users to conduct eval injection attacks and gain privileges via shell metacharacters in the -e argument. This is related to the utils/opcontrol component. Recommendations F...
CVE-2011-1760
utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to conduct eval injection attacks and gain privileges via shell metacharacters in the -e argument...
CVE-2010-3719
Eval injection vulnerability in IMAdminSchedTask.asp in the administrative interface for Symantec IM Manager 8.4.16 and earlier allows remote attackers to execute arbitrary code via unspecified parameters to the ScheduleTask method...
Sql injection
Eval injection vulnerability in IMAdminSchedTask.asp in the administrative interface for Symantec IM Manager 8.4.16 and earlier allows remote attackers to execute arbitrary code via unspecified parameters to the ScheduleTask method...
CVE-2010-3719
Summary: CVE-2010-3719 affects Symantec IM Manager. The vulnerability resides in the admin interface’s ScheduleTask function (IMAdminSchedTask.asp) and involves improper sanitization of POST input passed to an eval() call. Affected product is Symantec IM Manager up to version 8.4.16; exploitation...
PT-2011-1434
Name of the Vulnerable Software and Affected Versions Symantec IM Manager versions 8.4.16 and earlier Description The issue concerns an eval injection vulnerability in the administrative interface of Symantec IM Manager, specifically in the IMAdminSchedTask.asp file. This vulnerability allows...
Sql injection
Multiple eval injection vulnerabilities in the import functionality in the Chaos Tool Suite aka CTools module 6.x before 6.x-1.4 for Drupal allow remote authenticated users, with "administer page manager" privileges, to execute arbitrary PHP code via input to a text area, related to 1 the...