Lucene search
+L

7274 matches found

Tenable Nessus
Tenable Nessus
added 2009/01/29 12:0 a.m.33 views

Horde < 3.3.3 / 3.2.4 Horde_Image::factory driver Argument Local File Inclusion

Binary data 4835.prm...

6.4CVSS7.3AI score0.41263EPSS
SaveExploits8References9
Prion
Prion
added 2009/01/27 8:30 p.m.19 views

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in WB News 2.0.1, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the configinstalldir parameter to 1 search.php, 2 archive.php, 3 comments.php, and 4 news.php; 5 News.php, 6 SendFriend.php, 7...

6.8CVSS7.9AI score0.02885EPSS
SaveExploits2References3Affected Software1
Ubuntu
Ubuntu
added 2009/01/26 8:32 p.m.58 views

USN-711-1: KTorrent vulnerabilities

It was discovered that KTorrent did not properly restrict access when using the web interface plugin. A remote attacker could use a crafted http request and upload arbitrary torrent files to trigger the start of downloads and seeding. CVE-2008-5905 It was discovered that KTorrent did not properly...

6.8CVSS5.8AI score0.02456EPSS
SaveExploits0
Prion
Prion
added 2009/01/26 8:30 p.m.23 views

Code injection

Static code injection vulnerability in admin.php in Ryneezy phoSheezy 0.2 allows remote authenticated administrators to inject arbitrary PHP code into config/header via the header parameter. NOTE: this can be exploited by unauthenticated attackers by leveraging CVE-2009-0250. NOTE: the provenance...

6.5CVSS6.9AI score0.06282EPSS
SaveExploits2References2Affected Software1
CVE
CVE
added 2009/01/26 8:0 p.m.57 views

CVE-2009-0275

CVE-2009-0275 affects Ryneezy phoSheezy 0.2 via a static code injection vulnerability in admin.php that lets an authenticated admin inject PHP into config/header (and related config/footer, header) and can be exploited via CVE-2009-0250 to facilitate unauthenticated access. The issue is documente...

6.5CVSS6.8AI score0.04652EPSS
SaveExploits2References2Affected Software1
Cvelist
Cvelist
added 2009/01/26 8:0 p.m.42 views

CVE-2009-0275

Static code injection vulnerability in admin.php in Ryneezy phoSheezy 0.2 allows remote authenticated administrators to inject arbitrary PHP code into config/header via the header parameter. NOTE: this can be exploited by unauthenticated attackers by leveraging CVE-2009-0250. NOTE: the provenance...

6.6AI score0.04652EPSS
SaveExploits2References2
Prion
Prion
added 2009/01/23 7:0 p.m.19 views

Sql injection

Eval injection vulnerability in library/setup/rpc.php in Gravity Getting Things Done GTD 0.4.5 and earlier allows remote attackers to execute arbitrary PHP code via the objectname parameter...

10CVSS8.3AI score0.03398EPSS
SaveExploits2References4Affected Software1
Cvelist
Cvelist
added 2009/01/23 6:38 p.m.37 views

CVE-2008-5963

Eval injection vulnerability in library/setup/rpc.php in Gravity Getting Things Done GTD 0.4.5 and earlier allows remote attackers to execute arbitrary PHP code via the objectname parameter...

7.8AI score0.03398EPSS
SaveExploits2References4
Cvelist
Cvelist
added 2009/01/23 6:38 p.m.34 views

CVE-2008-5949

Multiple PHP remote file inclusion vulnerabilities in ccTiddly 1.7.4 and 1.7.6 allow remote attackers to execute arbitrary PHP code via a URL in the cctbase parameter to 1 index.php; 2 handle/proxy.php; 3 header.php, 4 include.php, and 5 workspace.php in includes/; and 6 plugins/RSS/files/rss.php...

7.6AI score0.02575EPSS
SaveExploits3References4
CVE
CVE
added 2009/01/23 6:38 p.m.64 views

CVE-2008-5963

Gravity GTD (Getting Things Done) up to version 0.4.5 is affected by an eval-injection vulnerability in library/setup/rpc.php that allows remote attackers to execute arbitrary PHP code via the objectname parameter. This CVE (CVE-2008-5963) is rated high by NVD (base score 10.0) with network attac...

10CVSS8.1AI score0.03398EPSS
SaveExploits2References4Affected Software1
NVD
NVD
added 2009/01/22 4:30 p.m.28 views

CVE-2009-0251

Static code injection vulnerability in admin.php in Ryneezy phoSheezy 0.2 allows remote authenticated administrators to inject arbitrary PHP code into config/footer via the footer parameter. NOTE: this can be exploited by unauthenticated attackers by leveraging CVE-2009-0250. NOTE: some of these...

6.5CVSS6.8AI score0.05556EPSS
SaveExploits1References4
Prion
Prion
added 2009/01/22 4:30 p.m.25 views

Code injection

Static code injection vulnerability in admin.php in Ryneezy phoSheezy 0.2 allows remote authenticated administrators to inject arbitrary PHP code into config/footer via the footer parameter. NOTE: this can be exploited by unauthenticated attackers by leveraging CVE-2009-0250. NOTE: some of these...

6.5CVSS7.1AI score0.06282EPSS
SaveExploits1References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2009/01/22 4:30 p.m.5 views

CVE-2009-0251

Static code injection vulnerability in admin.php in Ryneezy phoSheezy 0.2 allows remote authenticated administrators to inject arbitrary PHP code into config/footer via the footer parameter. NOTE: this can be exploited by unauthenticated attackers by leveraging CVE-2009-0250. NOTE: some of these...

6.5CVSS6AI score0.06282EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2009/01/22 4:0 p.m.38 views

CVE-2009-0251

Static code injection vulnerability in admin.php in Ryneezy phoSheezy 0.2 allows remote authenticated administrators to inject arbitrary PHP code into config/footer via the footer parameter. NOTE: this can be exploited by unauthenticated attackers by leveraging CVE-2009-0250. NOTE: some of these...

6.8AI score0.05556EPSS
SaveExploits1References4
CVE
CVE
added 2009/01/22 4:0 p.m.59 views

CVE-2009-0251

CVE-2009-0251 affects Ryneezy phoSheezy 0.2: static code injection in admin.php allows remote authenticated admins to inject PHP into config/footer via the footer parameter. NOTE: exploitation can be chained via CVE-2009-0250, which may enable unauthenticated access to sensitive config data. The ...

6.5CVSS7AI score0.05556EPSS
SaveExploits1References4Affected Software1
OpenVAS
OpenVAS
added 2009/01/22 12:0 a.m.29 views

KTorrent PHP Code Injection And Security Bypass Vulnerability

KTorrent is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.3AI score
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2009/01/21 2:30 a.m.38 views

CVE-2008-5920

The createanchors function in utils.inc in WebSVN 1.x allows remote attackers to execute arbitrary PHP code via a crafted username that is processed by the pregreplace function with the eval switch...

7.5CVSS6.2AI score0.0299EPSS
SaveExploits2References1
NVD
NVD
added 2009/01/21 2:30 a.m.27 views

CVE-2008-5920

The createanchors function in utils.inc in WebSVN 1.x allows remote attackers to execute arbitrary PHP code via a crafted username that is processed by the pregreplace function with the eval switch...

7.5CVSS7.4AI score0.0299EPSS
SaveExploits2References5
FreeBSD
FreeBSD
added 2009/01/21 12:0 a.m.28 views

roundcube -- webmail script insertion and php code injection

Secunia reports: Some vulnerabilities have been reported in RoundCube Webmail, which can be exploited by malicious users to compromise a vulnerable system and by malicious people to conduct script insertion attacks and compromise a vulnerable system. The HTML "background" attribute within e.g. HT...

4.3CVSS1.2AI score0.0198EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2009/01/16 12:0 a.m.21 views

phpList <= 2.10.8 Variable Overwriting

The version of phpList installed on the remote host emulates PHP's 'registerglobals' functionaltiy' insecurely in its 'admin/index.php' script. Provided PHP's 'registerglobals' setting is disabled, an unauthenticated attacker can exploit this issue to overwrite the 'SERVERConfigFile' and...

5.9AI score
SaveExploits0References4
Rows per page
Query Builder