Team IT Security (TSEC) Nachrichtenportal Logo


🕵️ CVE-2013-4857 | D-Link DIR-865L /router_info.xml XML File xml injection (OSVDB-97757)


Nachrichtenbereich: 🕵️ Sicherheitslücken
🔗 Quelle: vuldb.com

A vulnerability has been found in D-Link DIR-865L and classified as critical. Affected by this vulnerability is an unknown functionality of the file /router_info.xml. The manipulation as part of XML File leads to xml injection. This vulnerability is known as CVE-2013-4857. The attack can be launched remotely. There is no exploit available. ...

Sharing is caring on Social Media

Reddit
Telegram
LinkedIn
Xing
Twitter
Whatsapp
Facebook
Flipboard

🕵️ Ruby up to 2.2.9/2.3.6/2.4.3/2.5.0 Dir.open/Dir.new/Dir.entries/Dir.empty Dirempty directory traversal


📈 39.15 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2019-18213 | Red Hat XML Language Support up to 0.9.0 LSPXMLParserConfiguration.java XML Document xml injection


📈 22.48 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2019-19702 | modoboa-dmarc Plugin 1.1.0 on Modoboa XML Data XML Document xml injection (Issue 38)


📈 22.48 Punkte
🕵️ Sicherheitslücken

🕵️ LoboEvolution XML Parser XML File XML External Entity


📈 21.96 Punkte
🕵️ Sicherheitslücken

🕵️ Stroom up to 5.4.4 XML Parser XML File XML External Entity


📈 21.96 Punkte
🕵️ Sicherheitslücken

🕵️ UML Designer up to 8.0.0 XML Parser XML File XML External Entity


📈 21.96 Punkte
🕵️ Sicherheitslücken

🕵️ Jeesite 1.2.7 XML Data ActProcessService.java convertToModel() XML File XML External Entity


📈 21.96 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2011-1588 | Thunar 1.2.0/1.2.1 thunar_transfer_job_copy_node File Name format string (Nessus ID 75924 / OSVDB-71849)


📈 21.04 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2011-3349 | LightDM up to 0.9.5 Permission dmrc File Handler privileges management (BID-50506 / OSVDB-76892)


📈 21.04 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2014-1937 | Gamera up to 3.4.0 Temp File io.py tempfile.mktemp input validation (OSVDB-103301)


📈 21.04 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2014-1936 | rc up to 1.7.1-4 Temp File input validation (OSVDB-103304)


📈 21.04 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2014-1935 | 9base 1:6-6/1:6-7 Temp File input validation (OSVDB-103303)


📈 21.04 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2006-3041 | Codewalkers Ltwcalendar 4.1.3 calendar.php include ltw_config[include_dir file inclusion (OSVDB-27452)


📈 21.04 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2006-3692 | Silentweb listmessenger 0.9.3 listmessenger.php lm_path file inclusion (BID-19014 / OSVDB-28289)


📈 21.04 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2006-4271 | Jelsoft vBulletin 3.5.4 upgrade_301.php step file inclusion (OSVDB-28210)


📈 21.04 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2006-4429 | PHlyMail Lite up to 3.4.4 mod.output.php _PM_[path][handler] file inclusion (OSVDB-29355)


📈 21.04 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2006-7006 | Robin de Graff Somery 0.4.4 team.php checkauth file inclusion (BID-18412 / OSVDB-27662)


📈 21.04 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2006-7193 | Smarty 2.6.1 test_cases.php SMARTY_DIR file inclusion (XFDB-29739 / OSVDB-31096)


📈 21.04 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2007-3353 | Mywebland MyEvent 1.6 includes/template.php myevent_path file inclusion (OSVDB-36230)


📈 21.04 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2007-0496 | Neon Labs WebSite up to 3.2 lib/nl/nl.php g_strRootDir file inclusion (EDB-3163 / OSVDB-36797)


📈 21.04 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2007-0559 | Rp World 1.0.2 config.php sql_language file inclusion (EDB-3185 / OSVDB-36626)


📈 21.04 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2007-0558 | Inter7 vHostAdmin 1.0 modules/mail/main.php MODULES_DIR file inclusion (EDB-3191 / OSVDB-36627)


📈 21.04 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2007-0703 | WebBuilder 2.0 StageLoader.php GLOBALS[core][module_path] file inclusion (EDB-3249 / OSVDB-33607)


📈 21.04 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2007-1935 | Scar4u.de ScarAdController 1.1 admin/index.php file_exists site file inclusion (EDB-3682 / OSVDB-37403)


📈 21.04 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2007-2044 | Antonis Ventouris Weather module mod_weather.php absolute_path file inclusion (EDB-3712 / OSVDB-37435)


📈 21.04 Punkte
🕵️ Sicherheitslücken

🕵️ Medium CVE-2019-10803: Push-dir project Push-dir


📈 20.72 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2007-4081 | AlstraSoft Affiliate Network Pro merchants/temp.php rowid sql injection (BID-25026 / OSVDB-37870)


📈 20.41 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2007-3394 | eNdonesia banners.php bid sql injection (BID-24590 / OSVDB-38228)


📈 20.41 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2011-3584 | wec_discussion Extension up to 2.1.0 on TYPO3 sql injection (OSVDB-75582 / ID 100641)


📈 20.41 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2011-3583 | TYPO3 up to 4.5.5 Parameter sql injection (OSVDB-75584 / ID 100641)


📈 20.41 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2006-0064 | Devellion CubeCart ordersuccess.inc.php glob[rootDir] code injection (EDB-1398 / OSVDB-22218)


📈 20.41 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2007-0589 | Forum Livre 1.0 info_user.asp user sql injection (EDB-3197 / OSVDB-36644)


📈 20.41 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2007-2534 | phpHoo3 Login admin.php sql injection (BID-23854 / OSVDB-36180)


📈 20.41 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2007-2626 | Free Php Scripts SchoolBoard admin.php sql injection (BID-23798 / OSVDB-36162)


📈 20.41 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2005-4349 | phpMyAdmin 2.7.0 server_privileges.php sql injection (SA18113 / OSVDB-21978)


📈 20.41 Punkte
🕵️ Sicherheitslücken

matomo
•