270631
|
- |
|
docebo
|
docebo
|
PHP remote file inclusion vulnerability in addons/mod_media/body.php in Docebo 3.0.3 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in …
|
CWE-94
Code Injection
|
CVE-2006-6957
|
2013-08-31 14:20 |
2007-01-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
270632
|
- |
|
wikkawiki
|
wikkawiki
|
WikkaWiki (Wikka Wiki) before 1.1.6.3 allows attackers in a shared virtual host server environment to upload and execute an arbitrary configuration file by modifying the WAKKA_CONFIG environment vari…
|
NVD-CWE-Other
|
CVE-2007-2613
|
2013-08-30 14:27 |
2007-05-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
270633
|
- |
|
wikkawiki
|
wikkawiki
|
The vendor has addressed this issue through a product update:
http://www.wikkawiki.org/downloads/
|
NVD-CWE-Other
|
CVE-2007-2613
|
2013-08-30 14:27 |
2007-05-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
270634
|
- |
|
iatek
|
siteenable
|
Cross-site scripting (XSS) vulnerability in login.asp in SiteEnable 3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the ret_page parameter.
|
NVD-CWE-Other
|
CVE-2005-4483
|
2013-08-30 13:50 |
2005-12-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
270635
|
- |
|
greendesktiny
|
green_desktiny
|
SQL injection vulnerability in news_detail.php in Green Desktiny 2.3.1, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the id parameter.
|
CWE-89
SQL Injection
|
CVE-2009-4456
|
2013-08-28 15:14 |
2009-12-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
270636
|
- |
|
backup_manager
|
backup_manager
|
backup-manager-upload in Backup Manager before 0.6.3 provides the FTP server hostname, username, and password as plaintext command line arguments during FTP uploads, which allows local users to obtai…
|
CWE-255 CWE-310 CWE-200
Credentials Management Cryptographic Issues Information Exposure
|
CVE-2007-4656
|
2013-08-28 14:37 |
2007-09-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
270637
|
- |
|
netbsd
|
netbsd
|
Heap-based buffer overflow in the kernel in NetBSD 3.0, certain versions of FreeBSD and OpenBSD, and possibly other BSD derived operating systems allows local users to have an unknown impact. NOTE: …
|
NVD-CWE-Other
|
CVE-2007-1523
|
2013-08-28 14:28 |
2007-03-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
270638
|
- |
|
apple
|
podcast_producer
|
Podcast Capture in Podcast Producer for Apple Mac OS X 10.5.2 invokes a subtask with passwords in command line arguments, which allows local users to read the passwords via process listings.
|
CWE-200
Information Exposure
|
CVE-2008-0993
|
2013-08-27 14:56 |
2008-03-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
270639
|
- |
|
aiocp
|
aiocp
|
Cross-site scripting (XSS) vulnerability in shared/code/cp_authorization.php in All In One Control Panel (AIOCP) before 1.3.016 allows remote attackers to inject arbitrary web script or HTML via unsp…
|
NVD-CWE-Other
|
CVE-2007-2625
|
2013-08-27 14:41 |
2007-05-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
270640
|
- |
|
sane
|
sane sane-backend
|
saned in sane-backends 1.0.7 and earlier does not check the IP address of the connecting host during the SANE_NET_INIT RPC call, which allows remote attackers to use that call even if they are restri…
|
NVD-CWE-Other
|
CVE-2003-0773
|
2013-08-23 13:29 |
2003-09-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|