CentOS Security Advisory CESA-2009:0329 (freetype)

The remote host is missing updates to freetype announced in advisory CESA-2009:0329. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

CVE-2009-0329

The provided documents confirm a concrete SQL injection vulnerability in Joomla! component PccookBook (com_pccookbook). Specifically, CVE-2009-0329 affects index.php when using the recipe_id parameter in the viewrecipe action, enabling remote attackers to execute arbitrary SQL commands. The affec...

CVE-2009-0329

SQL injection vulnerability in the PcCookBook compccookbook component for Joomla! allows remote attackers to execute arbitrary SQL commands via the recipeid parameter in a viewrecipe action to index.php, a different vector than CVE-2008-0844...

CVE-2009-0329

creationtimestamp| type| source ---|---|--- 2009-01-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7824...

CVE-2008-0329

CVE-2008-0329 affects LulieBlog 1.0.1 and 1.0.2. The vulnerability arises because Admin/ scripts (article_suppr.php, comment_accepter.php, comment_refuser.php) do not restrict access, allowing remote attackers to perform actions such as accepting comments, deleting comments, and deleting articles...

CVE-2007-0329

download.php in Joonas Viljanen JV2 Folder Gallery allows remote attackers to read sensitive files via a relative pathname in the file parameter, as demonstrated by config/gallerysetup.php. NOTE: this issue might be resultant from a directory traversal vulnerability...

CVE-2007-0329

download.php in Joonas Viljanen JV2 Folder Gallery allows remote attackers to read sensitive files via a relative pathname in the file parameter, as demonstrated by config/gallerysetup.php. NOTE: this issue might be resultant from a directory traversal vulnerability...

CVE-2007-0329

CVE-2007-0329 affects the JV2 Folder Gallery (download.php) where a relative pathname in the file parameter enables directory traversal to read sensitive files (as shown by config/gallerysetup.php). Root cause is a path handling flaw; exploitation details are not provided in the supplied document...

CVE-2006-0329

The CVE-2006-0329 issue affects the HITSENSER Data Mart Server family (BS, BS-S, BS-M, BS-L, EX). A SQL injection vulnerability in the server’s SQL processing allows remote attackers to execute arbitrary SQL commands via unknown attack vectors, enabling partial disclosure/integrity impact and pot...

CVE-2005-0329

CVE-2005-0329: Directory traversal vulnerability in ZipGenius 5.5 and earlier. A ZIP file containing a file name with .. sequences allows remote attackers to create and possibly modify arbitrary files. Affected product: ZipGenius (versions up to 5.5 and earlier). Root cause: improper handling of ...

CVE-2005-0329

Directory traversal vulnerability in ZipGenius 5.5 and earlier allows remote attackers to create and possibly modify arbitrary files via a ZIP file with a file whose name includes .. dot dot sequences...

CVE-2004-0329

FreeChat 1.1.1a allows remote attackers to cause a denial of service crash via certain unexpected strings, as demonstrated using "aaaaa"...

CVE-2004-0329

CVE-2004-0329 affects FreeChat 1.1.1a. The issue allows remote attackers to trigger a denial-of-service crash by sending certain unexpected strings (demonstrated with “aaaaa”). According to the connected records, the vulnerability is exploitable over the network without authentication, but no con...

CVE-2004-0329

FreeChat 1.1.1a allows remote attackers to cause a denial of service crash via certain unexpected strings, as demonstrated using "aaaaa"...

CVE-2002-0329

Affected product: Snitz Forums 2000 (versions 3.3.03 and earlier). Vulnerability: cross-site scripting via crafted IMG tag SRC attribute, allowing remote attackers to execute arbitrary script as other Forum 2000 users. Root cause / details: the IMG SRC URL check is inadequate and can serve inject...

CVE-2002-0329

Cross-site scripting vulnerability in Snitz Forums 2000 3.3.03 and earlier allows remote attackers to execute arbitrary script as other Forums 2000 users via Javascript in an IMG tag...

CVE-2001-0329

Bugzilla 2.10 allows remote attackers to execute arbitrary commands via shell metacharacters in a username that is then processed by 1 the Bugzillalogin cookie in postbug.cgi, or 2 the who parameter in processbug.cgi...

CVE-2001-0329

Bugzilla 2.10 allows remote attackers to execute arbitrary commands via shell metacharacters in a username that is then processed by 1 the Bugzillalogin cookie in postbug.cgi, or 2 the who parameter in processbug.cgi...

CVE-2001-0329

Bugzilla 2.10 is vulnerable to remote arbitrary command execution via shell metacharacters in a username, processed by (1) the Bugzilla_login cookie in post_bug.cgi or (2) the who parameter in process_bug.cgi. The root cause is lack of input sanitization in the CGI workflow, enabling an attacker ...

CVE-2000-0329

The CVE concerns a Microsoft ActiveX control vulnerability in the Active Setup Control that allows a remote attacker to execute a malicious cabinet file via an attachment and an embedded script in an HTML email. Affected component is an ActiveX control; impact is remote code execution with partia...