python-gnupg vulnerable to shell injection

python-gnupg 0.3.5 and 0.3.6 allow for shell injection via a failure to escape backslashes in the shellquote function. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7323...

CVE-2014-1928

The connected advisories confirm a shell_quote handling flaw in python-gnupg 0.3.5 (and related 0.3.6) where improper quoting enables context-dependent code execution via shell metacharacters. Root cause is an incomplete fix for CVE-2013-7323. Impact is arbitrary code execution through crafted in...

sourdough 0.3.5 - Remote File Inclusion Vulnerability

No description provided by source. -----------------:Remote File Include:----------------- ------------------------------------------------------- script:sourdough 0.3.5 ------------------------------------------------------------------ download...

rdiffweb 0.3.5 - Directory Traversal vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/24092/info rdiffWeb is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable...

Micro CMS <= 0.3.5 - Remote (Add/Delete/Password Change) Exploit

No description provided by source. !/usr/bin/perl -------------------------------------------------------------- Micro CMS = 0.3.5 Remote Add/Delete/Password Change Exploit StAkeRathotmaildotit http://www.impliedbydesign.com/apps/microcms/microcms.zip...

PT-2012-1353 · Wxbitcoin +1 · Wxbitcoin +1

Name of the Vulnerable Software and Affected Versions: bitcoind versions prior to 0.3.5 wxBitcoin versions prior to 0.3.5 Description: The issue arises from improper handling of script opcodes in Bitcoin transactions, allowing remote attackers to spend bitcoins owned by other users. A fatal bug w...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in GreenSQL-Console before 0.3.5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "internal pages."...

CVE-2008-6416

Multiple cross-site scripting XSS vulnerabilities in GreenSQL-Console before 0.3.5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "internal pages."...

Remote file inclusion

PHP remote file inclusion vulnerability in examples/exampleclientsidejavascript.php in patForms, as used in Sourdough 0.3.5, allows remote attackers to execute arbitrary PHP code via a URL in the neededFilespatForms parameter...

CVE-2009-0456

CVE-2009-0456 describes a PHP remote file inclusion vulnerability in patForms’ examples/example_clientside_javascript.php, used by Sourdough 0.3.5. The vulnerability allows an attacker to cause arbitrary PHP code execution by supplying a URL in the neededFiles[patForms] parameter. The connected r...

Sourdough 0.3.5 Remote File Inclusion

-----------------:Remote File Include:----------------- ------------------------------------------------------- script:sourdough 0.3.5 ------------------------------------------------------------------ download...

sourdough 0.3.5 Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications =================================================== sourdough 0.3.5 Remote File Inclusion Vulnerability =================================================== -----------------:Remote File Include:-----------------...

sourdough 0.3.5 - Remote File Inclusion

-----------------:Remote File Include:----------------- ------------------------------------------------------- script:sourdough 0.3.5 ------------------------------------------------------------------ download...

sourdough 0.3.5 - Remote File Inclusion

sourdough 0.3.5 - Remote File Inclusion -----------------:Remote File Include:----------------- ------------------------------------------------------- script:sourdough 0.3.5 ------------------------------------------------------------------ download...

sourdough 0.3.5 Remote File Inclusion Vulnerability

No description provided by source. -----------------:Remote File Include:----------------- ------------------------------------------------------- script:sourdough 0.3.5 ------------------------------------------------------------------ download...

rdiffweb 0.3.5 - Directory Traversal

rdiffweb 0.3.5 - Directory Traversal source: https://www.securityfocus.com/bid/24092/info rdiffWeb is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable...

CVE-2006-5239

CVE-2006-5239 documents multiple cross-site scripting (XSS) vulnerabilities in the PHP-based blog software eXpBlog (version 0.3.5 and earlier). The flaws permit remote attackers to inject arbitrary web script or HTML via two parameters: (1) the query string (PHP_SELF) in kalender.php, and (2) the...