Amazon Linux 2023 : ruby3.2, ruby3.2-bundled-gems, ruby3.2-default-gems (ALAS2023-2025-1168)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1168 advisory. Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to versions 0.5.7, 0.4.20, 0.3.9, and 0.2.5, there is a possibility for denial of service by memory...

Stored XSS

Overview FormCMS is a FormCMS is an open-source Content Management System designed to simplify and accelerate web development workflows for CMS projects and general web applications. It streamlines data modeling, backend development, and frontend design, making them as intuitive as filling out a...

Net::IMAP 安全漏洞

Net::IMAP is a Ruby client api for the Message Access Protocol in the Ruby open source. A security vulnerability exists in Net::IMAP, which stems from a mishandling of server responses leading to memory exhaustion, which could result in a denial of service. The following versions are affected:...

SUSE CVE-2010-3355

Ember 0.5.7 places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

Markdown Preview Plus extension cross-site scripting vulnerability

Markdown Preview Plus MPP extension for Chrome is a markdown a markup language preview plugin for Chrome. A cross-site scripting vulnerability exists in versions of the MPP extension for Chrome platform prior to 0.5.7. A remote attacker can exploit this vulnerability to inject arbitrary web scrip...

Xplico 0.5.7 - (add.ctp) Remote XSS Vulnerability

No description provided by source...

Xplico 0.5.7 (add.ctp) Remote XSS Vulnerability

Summary The goal of Xplico is extract from an internet traffic capture the applications data contained. For example, from a pcap file Xplico extracts each email POP, IMAP, and SMTP protocols, all HTTP contents, each VoIP call SIP, FTP, TFTP, and so on. Xplico isn’t a network protocol analyzer...

Path traversal

Absolute path traversal vulnerability in sendfile.php in web-cp 0.5.7, when registerglobals is enabled, allows remote attackers to read arbitrary files via a full pathname in the filelocation parameter...

CVE-2008-6002

Absolute path traversal vulnerability in sendfile.php in web-cp 0.5.7, when registerglobals is enabled, allows remote attackers to read arbitrary files via a full pathname in the filelocation parameter...

CVE-2008-6002

Affected product: web-cp 0.5.7. The issue is an absolute path traversal in sendfile.php, exploitable when register_globals is enabled, allowing remote attackers to read arbitrary files via a full pathname in the filelocation parameter. Root cause: lack of input validation for the filelocation par...

CVE-2008-6002

Absolute path traversal vulnerability in sendfile.php in web-cp 0.5.7, when registerglobals is enabled, allows remote attackers to read arbitrary files via a full pathname in the filelocation parameter...

webcp 0.5.7 (filelocation) Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications =============================================================== webcp 0.5.7 filelocation Remote File Disclosure Vulnerability =============================================================== webcp 0.5.7 sendfile.php filelocation Remote File...

webcp 0.5.7 - 'filelocation' Remote File Disclosure

webcp 0.5.7 sendfile.php filelocation Remote File Disclosure Vulnerability Script : http://www.web-cp.net/releases/webcp-0.5.7.tar.gz Demo : http://gyrbo.madoka.be/web-cp/ Vuln : if $tf = fopen$filelocation, "r" // Date in the past POC :...

webcp-disclose.txt

webcp 0.5.7 sendfile.php filelocation Remote File Disclosure Vulnerability Script : http://www.web-cp.net/releases/webcp-0.5.7.tar.gz Demo : http://gyrbo.madoka.be/web-cp/ Vuln : if $tf = fopen$filelocation, "r" // Date in the past POC :...

webcp 0.5.7 - filelocation Remote File Disclosure

webcp 0.5.7 - filelocation Remote File Disclosure webcp 0.5.7 sendfile.php filelocation Remote File Disclosure Vulnerability Script : http://www.web-cp.net/releases/webcp-0.5.7.tar.gz Demo : http://gyrbo.madoka.be/web-cp/ Vuln : if $tf = fopen$filelocation, "r" // Date in the past POC :...

CVE-2007-1198

Cross-site scripting XSS vulnerability in TaskFreak! before 0.5.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly a variant of CVE-2007-0982...

CVE-2006-1977

CVE-2006-1977 is a cross-site scripting (XSS) vulnerability in FlexBB 0.5.7 BETA and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via the (1) name and (2) message parameters. The NVD entry lists a base score of 5.8 (MEDIUM) with CVSS2 characteristics: AV:N/AC:...