Lucene search
K

8 matches found

SUSE CVE
SUSE CVE
added 2023/02/15 6:16 a.m.1 views

SUSE CVE-2005-4031

Eval injection vulnerability in MediaWiki 1.5.x before 1.5.3 allows remote attackers to execute arbitrary PHP code via the "user language option," which is used as part of a dynamic class name that is processed using the eval function...

7.5CVSS8.2AI score0.01655EPSS
Exploits0References3
Hacker One
Hacker One
added 2017/10/22 2:53 a.m.23 views

Tor: Preferred language option fingerprinting issue in Tor Browser

I'm not so sure if this is an in-scope issue or by-design. But based on my understanding of 1, I feel that Tor doesn't want to make user configuration details of Tor Browser detectable by websites. But in about:preferencescontent, there's a "Languages" section that allows users to "choose your...

6.7AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2012/10/03 12:0 a.m.28 views

WordPress A Page Flip Book Plugin for WordPress 'pageflipbook_language' Parameter Arbitrary Code Execution

The version of the 'A Page Flip Book' plugin for WordPress installed on the remote host is affected by an arbitrary code execution vulnerability due to a failure to properly sanitize user-supplied input to the 'pageflipbooklanguage' parameter in the pageflipbook.php script. An unauthenticated,...

9.8CVSS7.8AI score0.02053EPSS
Exploits1References2
UbuntuCve
UbuntuCve
added 2005/12/06 11:3 a.m.23 views

CVE-2005-4031

Eval injection vulnerability in MediaWiki 1.5.x before 1.5.3 allows remote attackers to execute arbitrary PHP code via the "user language option," which is used as part of a dynamic class name that is processed using the eval function...

7.5CVSS6.2AI score0.01655EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2005/12/06 11:0 a.m.26 views

CVE-2005-4031

Eval injection vulnerability in MediaWiki 1.5.x before 1.5.3 allows remote attackers to execute arbitrary PHP code via the "user language option," which is used as part of a dynamic class name that is processed using the eval function...

7.5CVSS7.7AI score0.01655EPSS
Exploits0
OSV
OSV
added 2003/07/02 4:0 a.m.8 views

CVE-2003-0385

Buffer overflow in xaos 3.0-23 and earlier, when running setuid, allows local users to gain root privileges via a long -language option...

6.6AI score
Exploits0References3
OSV
OSV
added 2003/07/02 4:0 a.m.1 views

DEBIAN-CVE-2003-0385

Buffer overflow in xaos 3.0-23 and earlier, when running setuid, allows local users to gain root privileges via a long -language option...

7.2CVSS7.2AI score0.00152EPSS
Exploits0References1
Cvelist
Cvelist
added 2003/06/10 4:0 a.m.20 views

CVE-2003-0385

Buffer overflow in xaos 3.0-23 and earlier, when running setuid, allows local users to gain root privileges via a long -language option...

6.6AI score0.00152EPSS
Exploits0References2
Rows per page
Query Builder