Show filters
11 Total Results
Displaying 1-10 of 11
Sort by:
Attacker Value
Unknown
CVE-2017-11114
Disclosure Date: July 31, 2017 (last updated November 26, 2024)
The put_chars function in html_r.c in Twibright Links 2.14 allows remote attackers to cause a denial of service (buffer over-read) via a crafted HTML file.
0
Attacker Value
Unknown
CVE-2015-5497
Disclosure Date: August 18, 2015 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in the Web Links module 6.x-2.x before 6.x-2.6 and 7.x-1.x before 7.x-1.0 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors.
0
Attacker Value
Unknown
CVE-2009-0463
Disclosure Date: February 10, 2009 (last updated October 04, 2023)
PHP remote file inclusion vulnerability in includes/header.php in Groone GLinks 2.1 allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter.
0
Attacker Value
Unknown
CVE-2009-0299
Disclosure Date: January 27, 2009 (last updated October 04, 2023)
SQL injection vulnerability in index.php in Groone GLinks 2.1 allows remote attackers to execute arbitrary SQL commands via the cat parameter.
0
Attacker Value
Unknown
CVE-2008-3329
Disclosure Date: July 27, 2008 (last updated October 04, 2023)
Unspecified vulnerability in Links before 2.1, when "only proxies" is enabled, has unknown impact and attack vectors related to providing "URLs to external programs."
0
Attacker Value
Unknown
CVE-2006-2585
Disclosure Date: May 25, 2006 (last updated October 04, 2023)
SQL injection vulnerability in Destiney Links Script 2.1.2 allows remote attackers to execute arbitrary SQL commands via the ID parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
0
Attacker Value
Unknown
CVE-2006-2536
Disclosure Date: May 22, 2006 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in Destiney Links Script 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the (1) "Search" (term parameter in index.php) and (2) "Add a Site" (add.php) fields.
0
Attacker Value
Unknown
CVE-2006-2535
Disclosure Date: May 22, 2006 (last updated October 04, 2023)
index.php in Destiney Links Script 2.1.2 allows remote attackers to obtain the installation path via an invalid show parameter referencing a non-existent file, which reveals the path in the resulting error message. NOTE: this issue might be resultant from a more serious issue such as directory traversal.
0
Attacker Value
Unknown
CVE-2006-2534
Disclosure Date: May 22, 2006 (last updated October 04, 2023)
Destiney Links Script 2.1.2 does not protect library and other support files, which allows remote attackers to obtain the installation path via a direct URL to files in the (1) include and (2) themes/original directories.
0
Attacker Value
Unknown
CVE-2005-2782
Disclosure Date: September 02, 2005 (last updated February 22, 2025)
PHP remote file inclusion vulnerability in al_initialize.php for AutoLinks Pro 2.1 allows remote attackers to execute arbitrary PHP code via an "ftp://" URL in the alpath parameter, which bypasses the incomplete blacklist that only checks for "http" and "https" URLs.
0
