CVE-2007-0605

CVE-2007-0605 is an XSS flaw in Advanced Guestbook 2.4.2 (picture.php) exploited via the picture parameter to inject script/HTML. Public sources note exploitation is possible when PHP register_globals is On; remediation/workaround is to set register_globals to Off. No explicit exploit details or ...

ag-xss.txt

netVigilance Security Advisory 12 Advanced Guestbook version 2.4.2 Multiple XSS Attack Vulnerabilities Description: Advanced Guestbook is a PHP-based guestbook script. It includes many useful features such as preview, templates, e-mail notification, picture upload, page spanning , html tags...

perl security update

CentOS Errata and Security Advisory CESA-2006:0605 Updated Perl packages that fix security a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Perl is a high-level programming...

CentOS 4 : xorg-x11 (CESA-2005:198)

Updated xorg-x11 packages that fix a security issue as well as various bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. X.Org X11 is the X Window System which provides the core functionality...

CentOS 3 / 4 : openmotif (CESA-2005:412)

Updated openmotif packages that fix a flaw in the Xpm image library are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. OpenMotif provides libraries which implement the Motif industry standard graphical user interface. An integer...

CentOS 3 : XFree86 (CESA-2005:331)

Updated XFree86 packages that fix a libXpm integer overflow flaw are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. XFree86 is an open source implementation of the X Window System. It provides the basic low-level functionality...

CVE-2006-0605

CVE-2006-0605 concerns Unknown Domain Shoutbox 2005.07.21 and describes multiple input validation flaws enabling remote attackers to inject arbitrary code via the Handle or Message fields. The linked sources indicate two vulnerability classes: cross-site scripting (XSS) and SQL injection, arising...

Fedora Core 3 : xorg-x11-6.8.2-1.FC3.13 (2005-273)

An integer overflow flaw was found in libXpm, which is used by some applications for loading of XPM images. An attacker could create a malicious XPM file that would execute arbitrary code if opened by a victim using an application linked to the vulnerable library. The Common Vulnerabilities and...

fonts, xorg security update

CentOS Errata and Security Advisory CESA-2005:198 Updated xorg-x11 packages that fix a security issue as well as various bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. X.Org X11 is the X...

Moderate: Red Hat Security Advisory: xorg-x11 security update

Updated xorg-x11 packages that fix a security issue as well as various bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. X.Org X11 is the X Window System which provides the core functionality...

lesstif security update

CentOS Errata and Security Advisory CESA-2005:473-01 Updated lesstif packages that fix flaws in the Xpm library are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having Moderate security impact by the Red Hat Security Response Team. LessTif provides libraries which...

Moderate: Red Hat Security Advisory: lesstif security update

Updated lesstif packages that fix flaws in the Xpm library are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having Moderate security impact by the Red Hat Security Response Team. LessTif provides libraries which implement the Motif industry standard graphical user...

Fedora Core 2 : xorg-x11-6.7.0-14 (2005-272)

An integer overflow flaw was found in libXpm, which is used by some applications for loading of XPM images. An attacker could create a malicious XPM file that would execute arbitrary code if opened by a victim using an application linked to the vulnerable library. The Common Vulnerabilities and...

RHEL 4 : openmotif (RHSA-2005:412)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:412 advisory. OpenMotif provides libraries which implement the Motif industry standard graphical user interface. An integer overflow flaw was found in libXpm, which...

[SECURITY] [DSA 723-1] New XFree86 packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 723-1 [email protected] http://www.debian.org/security/ Martin Schulze May 9th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 723-1] New XFree86 packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 723-1 [email protected] http://www.debian.org/security/ Martin Schulze May 9th, 2005 http://www.debian.org/security/faq -...

XFree86 security update

CentOS Errata and Security Advisory CESA-2005:044-01 Updated XFree86 packages that fix a libXpm integer overflow flaw and a number of bugs are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. XFree86 is an open source implementati...

RHEL 2.1 : XFree86 (RHSA-2005:044)

Updated XFree86 packages that fix a libXpm integer overflow flaw and a number of bugs are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. XFree86 is an open source implementation of the X Window System. It provides the basic low...

Moderate: Red Hat Security Advisory: XFree86 security update

Updated XFree86 packages that fix a libXpm integer overflow flaw are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. XFree86 is an open source implementation of the X Window System. It provides the basic low-level functionality...

RHEL 3 : XFree86 (RHSA-2005:331)

Updated XFree86 packages that fix a libXpm integer overflow flaw are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. XFree86 is an open source implementation of the X Window System. It provides the basic low-level functionality...