Lucene search
K

793 matches found

OSV
OSV
added 2005/08/15 4:0 a.m.1 views

DEBIAN-CVE-2005-1527

Eval injection vulnerability in awstats.pl in AWStats 6.4 and earlier, when a URLPlugin is enabled, allows remote attackers to execute arbitrary Perl code via the HTTP Referrer, which is used in a $url parameter that is inserted into an eval function call...

5CVSS8.2AI score0.02665EPSS
Exploits0References1
CVE
CVE
added 2005/08/15 4:0 a.m.94 views

CVE-2005-2498

PHPXMLRPC

7.5CVSS9.8AI score0.05091EPSS
Exploits5References33Affected Software1
CVE
CVE
added 2005/08/07 4:0 a.m.44 views

CVE-2005-2483

Karrigell before 2.1.8 is affected by an eval-injection vulnerability in its services (.ks) scripts, allowing remote attackers to run arbitrary Python code by passing modified arguments that reference library functions used by the script. The connected documents do not provide exploit details bey...

7.5CVSS8.1AI score0.03068EPSS
Exploits0References6Affected Software1
RedHat Linux
RedHat Linux
added 2005/07/07 7:56 p.m.3 views

security flaw

Eval injection vulnerability in PEAR XMLRPC 1.3.0 and earlier aka XML-RPC or xmlrpc and PHPXMLRPC aka XML-RPC For PHP or php-xmlrpc 1.1 and earlier, as used in products such as 1 WordPress, 2 Serendipity, 3 Drupal, 4 egroupware, 5 MailWatch, 6 TikiWiki, 7 phpWebSite, 8 Ampache, and others, allows...

7.5CVSS6.2AI score0.79071EPSS
Exploits5References4
Cvelist
Cvelist
added 2005/07/01 4:0 a.m.31 views

CVE-2005-1921

Eval injection vulnerability in PEAR XMLRPC 1.3.0 and earlier aka XML-RPC or xmlrpc and PHPXMLRPC aka XML-RPC For PHP or php-xmlrpc 1.1 and earlier, as used in products such as 1 WordPress, 2 Serendipity, 3 Drupal, 4 egroupware, 5 MailWatch, 6 TikiWiki, 7 phpWebSite, 8 Ampache, and others, allows...

7.6AI score0.79071EPSS
Exploits5References50
CVE
CVE
added 2005/05/10 4:0 a.m.48 views

CVE-2003-1178

CVE-2003-1178 affects Advanced Poll 2.0.2. It exposes a vulnerability in comments.php where the (1) id, (2) template_set, or (3) action parameter can cause evaluated PHP code to run, allowing remote code execution. Impact is consistent with arbitrary PHP execution (no authentication required as p...

7.5CVSS8.2AI score0.02032EPSS
Exploits1References8Affected Software1
CVE
CVE
added 2005/03/26 5:0 a.m.43 views

CVE-2005-0887

The CVE-2005-0887 issue affects Double Choco Latte prior to 0.9.4.3. Root cause: eval() executed with user-supplied input via the menuAction variable in functions.inc.php or main.php, enabling remote arbitrary PHP code execution. Impact: partial confidentiality, integrity, and availability depend...

7.5CVSS7.8AI score0.02737EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2005/03/26 5:0 a.m.21 views

CVE-2005-0887

Eval injection vulnerability in Double Choco Latte before 0.9.4.3 allows remote attackers to execute arbitrary PHP code via the menuAction variable in 1 functions.inc.php or 2 main.php, which causes code to be injected into an eval statement...

7.8AI score0.02737EPSS
Exploits0References4
Debian CVE
Debian CVE
added 2005/03/26 5:0 a.m.16 views

CVE-2005-0887

Eval injection vulnerability in Double Choco Latte before 0.9.4.3 allows remote attackers to execute arbitrary PHP code via the menuAction variable in 1 functions.inc.php or 2 main.php, which causes code to be injected into an eval statement...

7.5CVSS7.9AI score0.02737EPSS
Exploits0
NVD
NVD
added 2004/12/31 5:0 a.m.29 views

CVE-2004-2631

Eval injection vulnerability in left.php in phpMyAdmin 2.5.1 up to 2.5.7, when LeftFrameLight is FALSE, allows remote attackers to execute arbitrary PHP code via a crafted table name...

7.5CVSS7.6AI score0.09353EPSS
Exploits1References12
OSV
OSV
added 2004/12/31 5:0 a.m.5 views

CVE-2004-2631

Eval injection vulnerability in left.php in phpMyAdmin 2.5.1 up to 2.5.7, when LeftFrameLight is FALSE, allows remote attackers to execute arbitrary PHP code via a crafted table name...

7.8AI score
Exploits0References14
OSV
OSV
added 2004/12/31 5:0 a.m.1 views

DEBIAN-CVE-2004-2631

Eval injection vulnerability in left.php in phpMyAdmin 2.5.1 up to 2.5.7, when LeftFrameLight is FALSE, allows remote attackers to execute arbitrary PHP code via a crafted table name...

7.5CVSS7.8AI score0.09353EPSS
Exploits1References1
NVD
NVD
added 2003/12/31 5:0 a.m.18 views

CVE-2003-1178

Eval injection vulnerability in comments.php in Advanced Poll 2.0.2 allows remote attackers to execute arbitrary PHP code via the 1 id, 2 templateset, or 3 action parameter...

7.5CVSS7.8AI score0.02032EPSS
Exploits1References8
Rows per page
Query Builder