IPSec Tools Denial of Service Vulnerability

IPSec Tools for Linux is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cross site scripting

Cross-site scripting XSS vulnerability in Redmine 0.7.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-4481

CVE-2008-4481 describes a cross-site scripting (XSS) vulnerability in Redmine 0.7.2 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, enabling an attacker to execute code in a user’s browser. Multiple connected sources (NVD, JVN/JVNDB, ...

CVE-2008-4481

Cross-site scripting XSS vulnerability in Redmine 0.7.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Sql injection

SQL injection vulnerability in visualizzatabelle.php in php-residence 0.7.2 and 1.0 allows remote attackers to execute arbitrary SQL commands via the cognomecerca parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-0353

CVE-2008-0353 affects php-residence versions 0.7.2 and 1.0, where visualizza_tabelle.php is vulnerable to SQL injection via the cognome_cerca parameter. The documented impact is that remote attackers can execute arbitrary SQL commands. The connected documents confirm the same description and do n...

CVE-2007-5939

The CVE concerns Heimdal 0.7.2: the gss_userok function in appl/ftp/ftpd/gss_userok.c does not allocate memory for the ticketfile pointer before calling free, allowing remote attackers to influence behavior via an invalid username. Affected component is Heimdal’s GSS-API handling in ftpd-related ...

CVE-2007-5939

The gssuserok function in appl/ftp/ftpd/gssuserok.c in Heimdal 0.7.2 does not allocate memory for the ticketfile pointer before calling free, which allows remote attackers to have an unknown impact via an invalid username. NOTE: the vulnerability was originally reported for ftpd.c, but this is...

CVE-2007-5939

The gssuserok function in appl/ftp/ftpd/gssuserok.c in Heimdal 0.7.2 does not allocate memory for the ticketfile pointer before calling free, which allows remote attackers to have an unknown impact via an invalid username. NOTE: the vulnerability was originally reported for ftpd.c, but this is...

Sql injection

SQL injection vulnerability in class2.php in e107 0.7.2 and earlier allows remote attackers to execute arbitrary SQL commands via a cookie as defined in $pref'cookiename'...

sBlog.txt

Product : sBlog 0.7.2 Vulnerability :sBlog SQL Injection and Path Disclosure Vulnerability Date of Disclosure : 02/05/06 Bugtraq ID : 17782 Summary: Software: sBlog 0.7.2 Site: http://servous.se/ Description: sBlog is a simple and new PHP Blog. Issue: Conducting a security benchmark on this open...

CVE-2006-2189

SQL injection vulnerability in search.php in Servous sBLOG 0.7.2 allows remote attackers to execute arbitrary SQL commands via the keyword parameter. NOTE: this issue can be used to trigger path disclosure. In addition, it might be primary to vector 1 in CVE-2006-1135...

Sql injection

SQL injection vulnerability in search.php in Servous sBLOG 0.7.2 allows remote attackers to execute arbitrary SQL commands via the keyword parameter. NOTE: this issue can be used to trigger path disclosure. In addition, it might be primary to vector 1 in CVE-2006-1135...

CVE-2006-2189

The CVE-2006-2189 issue affects sBlog 0.7.2, where search.php’s keyword parameter is not properly sanitized, allowing remote attackers to inject and execute arbitrary SQL commands. The vulnerability can also enable path disclosure as noted, indicating potential broader disclosure implications. Th...

GLSA-200603-14 : Heimdal: rshd privilege escalation

The remote host is affected by the vulnerability described in GLSA-200603-14 Heimdal: rshd privilege escalation An unspecified privilege escalation vulnerability in the rshd server of Heimdal has been reported. Impact : Authenticated users could exploit the vulnerability to escalate privileges or...

CVE-2006-1135

CVE-2006-1135 documents multiple cross-site scripting (XSS) vulnerabilities in sBlog 0.7.2. The affected component is the web application’s search functionality (search.php) and comments submission handling (comments_do.php). The root cause is insufficient input sanitization, allowing an attacker...

sBlog_0.72_xss.txt

sBlog 0.7.2 == Multiple Cross-Site Scripting Vulnerability =================================== Information of Software: Software: sBlog 0.7.2 Site: http://servous.se/ Description: sBlog is a simple and new PHP Blog. Is very very simple and it's use by newbie of PHP...

Cross site scripting

Cross-site scripting XSS vulnerability in Chatbox Plugin 1.0 in e107 0.7.2 allows remote attackers to inject arbitrary HTML or web script via a Chatbox, as demonstrated using a SCRIPT element...

CVE-2006-0857

Cross-site scripting XSS vulnerability in Chatbox Plugin 1.0 in e107 0.7.2 allows remote attackers to inject arbitrary HTML or web script via a Chatbox, as demonstrated using a SCRIPT element...

CVE-2006-0857

Cross-site scripting XSS vulnerability in Chatbox Plugin 1.0 in e107 0.7.2 allows remote attackers to inject arbitrary HTML or web script via a Chatbox, as demonstrated using a SCRIPT element...