RSS   Podatności dla
'Structures datagrid datasource mdb2'   RSS

2007-11-13
 
CVE-2007-5934

CWE-200
 
 
The LOB functionality in PEAR MDB2 before 2.5.0a1 interprets a request to store a URL string as a request to retrieve and store the contents of the URL, which might allow remote attackers to use MDB2 as an indirect proxy or obtain sensitive information via a URL into a form field in an MDB2 application, as demonstrated by a file:// URL or a URL for an intranet web site.

 
2007-07-09
 
CVE-2007-3628

 
 
Unspecified vulnerability in the fetch function in MDB2.php in PEAR Structures-DataGrid-DataSource-MDB2 0.1.9 and earlier allows attackers to "manipulate the generated sorting queries."

 

 >>> Vendor: PEAR 10 Produkty
Xml rpc
Text password
Pear liveuser
Pear archive tar
Pear archive zip
Structures datagrid datasource mdb2
PEAR
MAIL
Html ajax
Crypt gpg

Copyright 2024, cxsecurity.com

 

Back to Top