9 matches found
CVE-2022-29806
CVE-2022-29806 ZoneMinder 1.36.12 及之前的语言权限提升（以及远程代码执行） 描述 在 ZoneMinder 1.36.13 和 1.37.11 之前的版本中，调试日志文件和默认语言选项存在路径遍历漏洞，允许攻击者写入并执行任意代码，从而实现远程命令执行。 “该概念验证在 ZoneMinder 1.36.4 ubuntu18.04 docker ZoneMinder/zmdockerfiles 上测试通过，但仍适用于最新版本 1.36.12” 用法 root@kitploit: git clone...
SUSE CVE-2005-4031
Eval injection vulnerability in MediaWiki 1.5.x before 1.5.3 allows remote attackers to execute arbitrary PHP code via the "user language option," which is used as part of a dynamic class name that is processed using the eval function...
Tor: Preferred language option fingerprinting issue in Tor Browser
I'm not so sure if this is an in-scope issue or by-design. But based on my understanding of 1, I feel that Tor doesn't want to make user configuration details of Tor Browser detectable by websites. But in about:preferencescontent, there's a "Languages" section that allows users to "choose your...
WordPress A Page Flip Book Plugin for WordPress 'pageflipbook_language' Parameter Arbitrary Code Execution
The version of the 'A Page Flip Book' plugin for WordPress installed on the remote host is affected by an arbitrary code execution vulnerability due to a failure to properly sanitize user-supplied input to the 'pageflipbooklanguage' parameter in the pageflipbook.php script. An unauthenticated,...
CVE-2005-4031
Eval injection vulnerability in MediaWiki 1.5.x before 1.5.3 allows remote attackers to execute arbitrary PHP code via the "user language option," which is used as part of a dynamic class name that is processed using the eval function...
CVE-2005-4031
Eval injection vulnerability in MediaWiki 1.5.x before 1.5.3 allows remote attackers to execute arbitrary PHP code via the "user language option," which is used as part of a dynamic class name that is processed using the eval function...
CVE-2003-0385
Buffer overflow in xaos 3.0-23 and earlier, when running setuid, allows local users to gain root privileges via a long -language option...
