Lucene search
+L

7270 matches found

CVE
CVE
added 2009/01/26 8:0 p.m.57 views

CVE-2009-0275

CVE-2009-0275 affects Ryneezy phoSheezy 0.2 via a static code injection vulnerability in admin.php that lets an authenticated admin inject PHP into config/header (and related config/footer, header) and can be exploited via CVE-2009-0250 to facilitate unauthenticated access. The issue is documente...

6.5CVSS6.8AI score0.04652EPSS
SaveExploits2References2Affected Software1
Cvelist
Cvelist
added 2009/01/26 8:0 p.m.42 views

CVE-2009-0275

Static code injection vulnerability in admin.php in Ryneezy phoSheezy 0.2 allows remote authenticated administrators to inject arbitrary PHP code into config/header via the header parameter. NOTE: this can be exploited by unauthenticated attackers by leveraging CVE-2009-0250. NOTE: the provenance...

6.6AI score0.04652EPSS
SaveExploits2References2
Prion
Prion
added 2009/01/23 7:0 p.m.19 views

Sql injection

Eval injection vulnerability in library/setup/rpc.php in Gravity Getting Things Done GTD 0.4.5 and earlier allows remote attackers to execute arbitrary PHP code via the objectname parameter...

10CVSS8.3AI score0.03398EPSS
SaveExploits2References4Affected Software1
Cvelist
Cvelist
added 2009/01/23 6:38 p.m.36 views

CVE-2008-5963

Eval injection vulnerability in library/setup/rpc.php in Gravity Getting Things Done GTD 0.4.5 and earlier allows remote attackers to execute arbitrary PHP code via the objectname parameter...

7.8AI score0.03398EPSS
SaveExploits2References4
Cvelist
Cvelist
added 2009/01/23 6:38 p.m.34 views

CVE-2008-5949

Multiple PHP remote file inclusion vulnerabilities in ccTiddly 1.7.4 and 1.7.6 allow remote attackers to execute arbitrary PHP code via a URL in the cctbase parameter to 1 index.php; 2 handle/proxy.php; 3 header.php, 4 include.php, and 5 workspace.php in includes/; and 6 plugins/RSS/files/rss.php...

7.6AI score0.02575EPSS
SaveExploits3References4
CVE
CVE
added 2009/01/23 6:38 p.m.64 views

CVE-2008-5963

Gravity GTD (Getting Things Done) up to version 0.4.5 is affected by an eval-injection vulnerability in library/setup/rpc.php that allows remote attackers to execute arbitrary PHP code via the objectname parameter. This CVE (CVE-2008-5963) is rated high by NVD (base score 10.0) with network attac...

10CVSS8.1AI score0.03398EPSS
SaveExploits2References4Affected Software1
NVD
NVD
added 2009/01/22 4:30 p.m.28 views

CVE-2009-0251

Static code injection vulnerability in admin.php in Ryneezy phoSheezy 0.2 allows remote authenticated administrators to inject arbitrary PHP code into config/footer via the footer parameter. NOTE: this can be exploited by unauthenticated attackers by leveraging CVE-2009-0250. NOTE: some of these...

6.5CVSS6.8AI score0.05556EPSS
SaveExploits1References4
Prion
Prion
added 2009/01/22 4:30 p.m.25 views

Code injection

Static code injection vulnerability in admin.php in Ryneezy phoSheezy 0.2 allows remote authenticated administrators to inject arbitrary PHP code into config/footer via the footer parameter. NOTE: this can be exploited by unauthenticated attackers by leveraging CVE-2009-0250. NOTE: some of these...

6.5CVSS7.1AI score0.06282EPSS
SaveExploits1References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2009/01/22 4:30 p.m.5 views

CVE-2009-0251

Static code injection vulnerability in admin.php in Ryneezy phoSheezy 0.2 allows remote authenticated administrators to inject arbitrary PHP code into config/footer via the footer parameter. NOTE: this can be exploited by unauthenticated attackers by leveraging CVE-2009-0250. NOTE: some of these...

6.5CVSS6AI score0.06282EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2009/01/22 4:0 p.m.38 views

CVE-2009-0251

Static code injection vulnerability in admin.php in Ryneezy phoSheezy 0.2 allows remote authenticated administrators to inject arbitrary PHP code into config/footer via the footer parameter. NOTE: this can be exploited by unauthenticated attackers by leveraging CVE-2009-0250. NOTE: some of these...

6.8AI score0.05556EPSS
SaveExploits1References4
CVE
CVE
added 2009/01/22 4:0 p.m.59 views

CVE-2009-0251

CVE-2009-0251 affects Ryneezy phoSheezy 0.2: static code injection in admin.php allows remote authenticated admins to inject PHP into config/footer via the footer parameter. NOTE: exploitation can be chained via CVE-2009-0250, which may enable unauthenticated access to sensitive config data. The ...

6.5CVSS7AI score0.05556EPSS
SaveExploits1References4Affected Software1
OpenVAS
OpenVAS
added 2009/01/22 12:0 a.m.29 views

KTorrent PHP Code Injection And Security Bypass Vulnerability

KTorrent is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.3AI score
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2009/01/21 2:30 a.m.38 views

CVE-2008-5920

The createanchors function in utils.inc in WebSVN 1.x allows remote attackers to execute arbitrary PHP code via a crafted username that is processed by the pregreplace function with the eval switch...

7.5CVSS6.2AI score0.0299EPSS
SaveExploits2References1
NVD
NVD
added 2009/01/21 2:30 a.m.27 views

CVE-2008-5920

The createanchors function in utils.inc in WebSVN 1.x allows remote attackers to execute arbitrary PHP code via a crafted username that is processed by the pregreplace function with the eval switch...

7.5CVSS7.4AI score0.0299EPSS
SaveExploits2References5
FreeBSD
FreeBSD
added 2009/01/21 12:0 a.m.28 views

roundcube -- webmail script insertion and php code injection

Secunia reports: Some vulnerabilities have been reported in RoundCube Webmail, which can be exploited by malicious users to compromise a vulnerable system and by malicious people to conduct script insertion attacks and compromise a vulnerable system. The HTML "background" attribute within e.g. HT...

4.3CVSS1.2AI score0.0198EPSS
SaveExploits1References4
Packet Storm
Packet Storm
added 2009/01/16 12:0 a.m.45 views

MKPortal 1.2.1 XSS / SQL Injection / File Upload

waraxe-2009-SA070 - Multiple Vulnerabilities in MKPortal = 1.2.1 ============================================================================== Author: Janek Vind "waraxe" Date: 15. January 2009 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-70.html Description of vulnerable software...

0.5AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2009/01/16 12:0 a.m.21 views

phpList <= 2.10.8 Variable Overwriting

The version of phpList installed on the remote host emulates PHP's 'registerglobals' functionaltiy' insecurely in its 'admin/index.php' script. Provided PHP's 'registerglobals' setting is disabled, an unauthenticated attacker can exploit this issue to overwrite the 'SERVERConfigFile' and...

5.9AI score
SaveExploits0References4
OSV
OSV
added 2009/01/15 5:30 p.m.16 views

CVE-2008-5906

Eval injection vulnerability in the web interface plugin in KTorrent before 3.1.4 allows remote attackers to execute arbitrary PHP code via unspecified parameters to this interface's PHP scripts...

8AI score
SaveExploits0References13
NVD
NVD
added 2009/01/15 5:30 p.m.28 views

CVE-2008-5906

Eval injection vulnerability in the web interface plugin in KTorrent before 3.1.4 allows remote attackers to execute arbitrary PHP code via unspecified parameters to this interface's PHP scripts...

6.8CVSS7.7AI score0.01968EPSS
SaveExploits0References13
CVE
CVE
added 2009/01/15 5:0 p.m.72 views

CVE-2008-5906

KTorrent’s web interface plugin is affected by CVE-2008-5906 (and CVE-2008-5905). The vulnerability arises from improper handling of web-interface request parameters, enabling remote attackers to inject PHP code and, per Gentoo/Ubuntu advisories, potentially perform arbitrary code execution in th...

6.8CVSS7.8AI score0.01968EPSS
SaveExploits0References13Affected Software1
Rows per page
Query Builder