5415 matches found
CVE-2008-4656
SQL injection vulnerability in the Frontend Users View feusersview 0.1.6 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
Sql injection
SQL injection vulnerability in the Frontend Users View feusersview 0.1.6 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2008-4656
SQL injection vulnerability in the Frontend Users View feusersview 0.1.6 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2008-4656: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the Frontend Users View feusersview 0.1.6 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
TYPO3 Security Bulletin
Several vulnerabilities have been found in the following third party TYPO3 extensions: JobControl dmmjobcontrol, Econda Plugin econda, Frontend Users View feusersview, Mannschaftsliste kiddogplayerlist, M1 Intern m1intern, Simple survey simplesurvey, Page Improvements smpageimprovements Please re...
CVE-2008-4201: Improper Restriction of Operations within the Bounds of a Memory Buffer
Heap-based buffer overflow in the decodeMP4file function frontend/main.c in FAAD2 2.6.1 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MPEG-4 MP4 file...
oblog4.6添加后台管理员漏洞
oblog4.6在处理相关数据时存在漏洞 造成可以添加后台管理员。 oblog4.6 sql版 http://www.oblog.cn/ 1、注册一个用户,用户名script,密码123456 2、发布一篇日志,日志标题:测试一下 3、个人前台首页找到日志"测试一下",点"推荐" 4、个人后台管理,选择"常用"选项中的"推荐日志",然后点"测试一下"日志后面的修改,把摘要内容修改成: s'//WHERE/ /logid=1;insert//into//oblogadmin//username,pa...
Bea Weblogic Apache Connector Code Exec / Denial of Service Exploit
Exploit for unknown platform in category remote exploits =================================================================== Bea Weblogic Apache Connector Code Exec / Denial of Service Exploit =================================================================== // Bea Weblogic -- Apache Connector...
CVE-2008-3039
SQL injection vulnerability in the DAM Frontend damfrontend extension 0.1.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
Design/Logic Flaw
Unspecified vulnerability in the DAM Frontend damfrontend extension 0.1.0 and earlier for TYPO3 has unknown impact and attack vectors related to "Improper Error Handling."...
Improper access control
Unspecified vulnerability in the DAM Frontend damfrontend extension 0.1.0 and earlier for TYPO3 has unknown impact and attack vectors related to "broken access control."...
CVE-2008-3052
Unspecified vulnerability in the SQL Frontend mhomsqlio extension 1.0.11 and earlier for TYPO3 allows remote attackers to cause a denial of service via unknown vectors...
Sql injection
SQL injection vulnerability in the DAM Frontend damfrontend extension 0.1.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2008-3042
Unspecified vulnerability in the DAM Frontend damfrontend extension 0.1.0 and earlier for TYPO3 has unknown impact and attack vectors related to "Improper Error Handling."...
CVE-2008-3041
Unspecified vulnerability in the DAM Frontend damfrontend extension 0.1.0 and earlier for TYPO3 has unknown impact and attack vectors related to "broken access control."...
CVE-2008-3041
Technical details are not publicly available in the provided documents for CVE-2008-3041; no specifics on affected TYPO3 DAM Frontend version, vulnerability type, impact, or remediation are given. Monitor for updates.
CVE-2008-3039
SQL injection vulnerability in the DAM Frontend damfrontend extension 0.1.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2008-3052
Unspecified vulnerability in the SQL Frontend mhomsqlio extension 1.0.11 and earlier for TYPO3 allows remote attackers to cause a denial of service via unknown vectors...