195 matches found
CVE-2010-0287
Directory traversal vulnerability in the ACL Manager plugin plugins/acl/ajax.php in DokuWiki before 2009-12-25b allows remote attackers to list the contents of arbitrary directories via a .. dot dot in the ns parameter...
CVE-2010-0287
Directory traversal vulnerability in the ACL Manager plugin plugins/acl/ajax.php in DokuWiki before 2009-12-25b allows remote attackers to list the contents of arbitrary directories via a .. dot dot in the ns parameter...
CVE-2010-0287
Summary (CVE-2010-0287): A directory-traversal in DokuWiki’s ACL Manager plugin (plugins/acl/ajax.php) allows remote listing of arbitrary directories via a .. in the ns parameter. Affected: DokuWiki prior to the 2009-12-25b release. CVSS-like context from OpenVAS lists base 7.5 (vector AV:N/AC:L/...
CVE-2010-0287
Directory traversal vulnerability in the ACL Manager plugin plugins/acl/ajax.php in DokuWiki before 2009-12-25b allows remote attackers to list the contents of arbitrary directories via a .. dot dot in the ns parameter...
FreeBSD Ports: dokuwiki
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
[SECURITY] [DSA-1976-1] New dokuwiki packages fix several vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1976-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano January 22, 2010 http://www.debian.org/security/faq -...
[SECURITY] [DSA-1976-1] New dokuwiki packages fix several vulnerabilities
------------------------------------------------------------------------ Debian Security Advisory DSA-1976-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano January 22, 2010 http://www.debian.org/security/faq -...
CVE-2010-0287
creationtimestamp| type| source ---|---|--- 2010-01-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11141...
CentOS Update for libxslt CESA-2008:0287 centos3 x86_64
Check for the Version of libxslt OpenVAS Vulnerability Test CentOS Update for libxslt CESA-2008:0287 centos3 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
CentOS Update for libxslt CESA-2008:0287-01 centos2 i386
Check for the Version of libxslt OpenVAS Vulnerability Test CentOS Update for libxslt CESA-2008:0287-01 centos2 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...
CentOS Update for libxslt CESA-2008:0287 centos3 x86_64
Check for the Version of libxslt OpenVAS Vulnerability Test CentOS Update for libxslt CESA-2008:0287 centos3 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
CentOS Update for libxslt CESA-2008:0287-01 centos2 i386
Check for the Version of libxslt OpenVAS Vulnerability Test CentOS Update for libxslt CESA-2008:0287-01 centos2 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...
CVE-2009-0287
SQL injection vulnerability in lib/patUser.php in KEEP Toolkit before 2.5.1 allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password...
CVE-2009-0287
The vulnerability CVE-2009-0287 affects KEEP Toolkit prior to 2.5.1, exposed via lib/patUser.php. It allows remote attackers to inject SQL through the username and password parameters, enabling arbitrary SQL commands. Impact per CVSS v2 (AV:N/AC:L/Au:N/C:P/I:P/A:P) is high (base score 7.5). Upgra...
CVE-2008-0287
PHP remote file inclusion vulnerability in VisionBurst vcart 3.3.2 allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter to 1 index.php and 2 checkout.php...
CVE-2008-0287
CVE-2008-0287 affects VisionBurst vcart 3.3.2, where the abs_path parameter in (1) index.php and (2) checkout.php enables a remote attacker to include arbitrary PHP files, leading to arbitrary code execution. The vulnerability is a PHP remote file inclusion (RFI) issue. Connected sources confirm ...
CVE-2006-0287
Affected software: Oracle HTTP Server component of Oracle Database Server 10.1.0.5 and Application Server 10.1.2.0.2. The CVE-2006-0287 entry is described as an unspecified vulnerability with unspecified impact/attack vectors per Oracle (Oracle Vuln# OHS02). Some connected sources (Oracle HTTP Se...
CVE-2005-0287
Bottomline Webseries Payment Application allows remote attackers to read arbitrary files on the network via a report template with modified ReportPath or ReportName values...
CVE-2005-0287
CVE-2005-0287 affects Bottomline Webseries Payment Application. A remote attacker can read arbitrary files on the network by supplying a modified ReportPath or ReportName in a report template, implying a path-leaking/authorization bypass in report handling. The provided metrics indicate partial c...