5 matches found
CVE-2023-3805
A vulnerability, which was classified as critical, has been found in Xiamen Four Letter Video Surveillance Management System up to 20230712. This issue affects some unknown processing in the library UserInfoAction.class of the component Login. The manipulation leads to improper authorization. The...
PT-2023-26266 · Unknown · Xiamen Four Letter Video Surveillance Management System
Name of the Vulnerable Software and Affected Versions: Xiamen Four Letter Video Surveillance Management System versions up to 20230712 Description: A critical issue has been found in the library UserInfoAction.class of the component Login, affecting some unknown processing. This leads to improper...
[ MDVSA-2014:083 ] mediawiki
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:083 http://www.mandriva.com/en/support/security/ Package : mediawiki Date : May 8, 2014 Affected: Business Server 1.0 Problem Description: Updated mediawiki packages fix security vulnerabilities: Login CSRF...
CVE-2014-2853
Cross-site scripting XSS vulnerability in includes/actions/InfoAction.php in MediaWiki before 1.21.9 and 1.22.x before 1.22.6 allows remote attackers to inject arbitrary web script or HTML via the sort key in an info action...
CVE-2008-6788
CVE-2008-6788 concerns MindDezign Photo Gallery 2.2. The issue is a SQL injection via the id parameter in an info action to index.php, exploitable when magic_quotes_gpc is disabled. The underlying vulnerability arises from unsafeguarded input leading to arbitrary SQL execution by remote attackers...