Lucene search
+L

148 matches found

NVD
NVD
added 2011/01/13 7:00 p.m.25 views

CVE-2011-0270

Format string vulnerability in nnmRptConfig.exe in HP OpenView Network Node Manager OV NNM 7.51 and 7.53 allows remote attackers to execute arbitrary code via format string specifiers in input data that involves an invalid template name...

10CVSS7.5AI score0.1631EPSS
SaveExploits0References7
Zero Day Initiative
Zero Day Initiative
added 2011/01/10 12:00 a.m.37 views

Hewlett-Packard OpenView Network Node Manager nnmRptConfig.exe Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Network Node Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within nnmRptConfig.exe CGI which is exposed by the webserver which listens by defaul...

10CVSS4.4AI score0.1631EPSS
SaveExploits0References1
FreeBSD
FreeBSD
added 2010/04/05 12:00 a.m.34 views

MoinMoin -- cross-site scripting vulnerabilities

The MoinMoin developers reports: Fix XSS in Despam action CVE-2010-0828 Fix XSS issues by escaping template name in messages by fixing other places that had similar issues...

3.5CVSS5.9AI score0.02262EPSS
SaveExploits1References2
Packet Storm
Packet Storm
added 2009/10/30 12:00 a.m.40 views

vBulletin misc.php Template Name Arbitrary Code Execution

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'vBulletin...

7.5CVSS0.2AI score0.35818EPSS
SaveExploits4
CVE
CVE
added 2005/10/25 4:00 a.m.67 views

CVE-2004-2493

The CVE-2004-2493 entry describes a directory traversal vulnerability in Groupmax World Wide Web (GmaxWWW) 2 and 3, and Desktop 5, 6, and Desktop for Jichitai. A remote authenticated attacker can read arbitrary .html files through the template name parameter. Affected software components are the ...

4CVSS6.7AI score0.01312EPSS
SaveExploits0References5Affected Software2
Packet Storm
Packet Storm
added 2005/02/26 12:00 a.m.40 views

vbulletin306.txt

Summary: vbulletin 3.0.6 and below php code injection Description =========== vBulletin is a powerful, scalable and fully customizable forums package for your web site. It has been written using the Web's quickest-growing scripting language; PHP, and is complimented with a highly efficient and...

7.4AI score
SaveExploits0
securityvulns
securityvulns
added 2005/02/22 12:00 a.m.45 views

[Full-Disclosure] : [SCAN Associates Security Advisory] vbulletin 3.0.6 and below php code injection

Summary: vbulletin 3.0.6 and below php code injection Description =========== vBulletin is a powerful, scalable and fully customizable forums package for your web site. It has been written using the Web's quickest-growing scripting language; PHP, and is complimented with a highly efficient and...

7AI score
SaveExploits0
Friends Of PHP
Friends Of PHP
added 1970/01/01 12:00 a.m.14 views

PHP code injection via `{% use %}` template name

More info at https://symfony.com/cve-2026-46633...

9.8CVSS5.8AI score0.00688EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder