Vulnerabilidades en n/a
161.457 resultadosCVE-2008-1856—plugins/maps/db_handler.php in LinPHA 1.3.3 and earlier does not require authentication for a settings action that modifies the configuratioEPSS 2.7%CVE-2006-2962—PHP remote file inclusion vulnerability in sql_fcnsOLD.php in Emergenices Personnel Information System (Empris) 20020923 and earlier allows EPSS 2.7%CVE-2011-2739—The file-blocking feature in EMC Documentum eRoom 7.3.x and 7.4.x before 7.4.3.g does not properly restrict the uploading and opening of filEPSS 2.7%CVE-2000-0904—Voyager web server 2.01B in the demo disks for QNX 405 stores sensitive web client information in the .photon directory in the web document EPSS 2.7%CVE-2008-3776—Directory traversal vulnerability in Fujitsu Web-Based Admin View 2.1.2 allows remote attackers to read arbitrary files via a .. (dot dot) iEPSS 2.7%CVE-2012-3369—The CallerIdentityLoginModule in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, BRMS Platform beEPSS 2.7%CVE-2009-3366—Directory traversal vulnerability in navigation.php in An image gallery 1.0 allows remote attackers to list arbitrary directories via a .. (EPSS 2.7%CVE-2011-3547—Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 EPSS 2.7%CVE-2008-2294—Pet Grooming Management System 2.0 allows remote attackers to gain privileges via a direct request to useradded.php with a modified user namEPSS 2.7%CVE-2003-1314—PHP remote file inclusion vulnerability in admin/auth.php in EternalMart Guestbook (EMGB) 1.1 allows remote attackers to execute arbitrary PEPSS 2.7%CVE-2006-4214—Multiple SQL injection vulnerabilities in Zen Cart 1.3.0.2 and earlier allow remote attackers to execute arbitrary SQL commands via (1) GPC EPSS 2.7%CVE-2014-2208—CRLF injection vulnerability in the LightProcess protocol implementation in hphp/util/light-process.cpp in Facebook HipHop Virtual Machine (EPSS 2.7%CVE-2020-20298—Eval injection vulnerability in the parserCommom method in the ParserTemplate class in zzz_template.php in zzzphp 1.7.2 allows remote attackEPSS 2.7%CVE-2018-20969—do_ed_script in pch.c in GNU patch through 2.7.6 does not block strings beginning with a ! character. NOTE: this is the same commit as for CEPSS 2.7%CVE-2006-6611—PHP remote file inclusion vulnerability in interface.php in Barman 0.0.1r3 allows remote attackers to execute arbitrary PHP code via a URL iEPSS 2.7%CVE-2013-7327—The gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 does not check return values, which allows remote attackers to cause a denEPSS 2.7%CVE-2007-3434—index.php in Pharmacy System 2 and earlier allows remote attackers to obtain sensitive information via a ' (quote) character in the page parEPSS 2.7%CVE-2011-2944—SQL injection vulnerability in login.php in MegaLab The Uploader before 2.0.5 allows remote attackers to execute arbitrary SQL commands via EPSS 2.7%CVE-2016-2032—A vulnerability exists in the Aruba AirWave Management Platform 8.x prior to 8.2 in the management interface of an underlying system componeEPSS 2.7%CVE-2006-4748—Multiple SQL injection vulnerabilities in F-ART BLOG:CMS 4.1 allow remote attackers to execute arbitrary SQL commands via the (1) xagent, (2EPSS 2.7%