CVE-2014-0794

SQL injection vulnerability in the JV Comment comjvcomment component before 3.0.3 for Joomla! allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a comment.like action to index.php...

CVE-2014-0794

CVE-2014-0794 describes a SQL injection in Joomla! JV Comment (com_jvcomment) prior to 3.0.3. The vulnerability occurs in the id parameter of the comment.like action to index.php, allowing remote authenticated users to inject arbitrary SQL commands into the application's database. Affected softwa...

Joomla JV Comment 3.0.2 SQL Injection Vulnerability

Joomla JV Comment extension version 3.0.2 suffers from a remote SQL injection vulnerability. Product: JV Comment Joomla Extension Vendor: joomlavi.com Vulnerable Versions: 3.0.2 and probably prior Tested Version: 3.0.2 Advisory Publication: January 2, 2014 without technical details Vendor...

Joomla JV Comment 3.0.2 SQL Injection

Advisory ID: HTB23195 Product: JV Comment Joomla Extension Vendor: joomlavi.com Vulnerable Versions: 3.0.2 and probably prior Tested Version: 3.0.2 Advisory Publication: January 2, 2014 without technical details Vendor Notification: January 2, 2014 Vendor Patch: January 14, 2014 Public Disclosure...

Joomla! Component JV Comment 3.0.2 - id SQL Injection

Joomla! Component JV Comment 3.0.2 - id SQL Injection Advisory ID: HTB23195 Product: JV Comment Joomla Extension Vendor: joomlavi.com Vulnerable Versions: 3.0.2 and probably prior Tested Version: 3.0.2 Advisory Publication: January 2, 2014 without technical details Vendor Notification: January 2,...

Joomla! Component JV Comment 3.0.2 - 'id' SQL Injection

Advisory ID: HTB23195 Product: JV Comment Joomla Extension Vendor: joomlavi.com Vulnerable Versions: 3.0.2 and probably prior Tested Version: 3.0.2 Advisory Publication: January 2, 2014 without technical details Vendor Notification: January 2, 2014 Vendor Patch: January 14, 2014 Public Disclosure...

openSUSE: Security Advisory for Mozilla Firefox and others (openSUSE-SU-2013:0630-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for Mozilla Firefox and others (openSUSE-SU-2013:0631-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE Update for Mozilla Firefox and others openSUSE-SU-2013:0630-1 (Mozilla Firefox and others)

Check for the Version of Mozilla Firefox and others OpenVAS Vulnerability Test $Id: gbsuse201306301.nasl 8483 2018-01-22 06:58:04Z teissa $ SuSE Update for Mozilla Firefox and others openSUSE-SU-2013:0630-1 Mozilla Firefox and others Authors: System Generated Check Copyright: Copyright C 2013...

Mozilla SeaMonkey Multiple Vulnerabilities -01 (Apr 2013) - Windows

Mozilla SeaMonkey is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scripttagname:"impact",...

Mozilla SeaMonkey Multiple Vulnerabilities -01 Apr13 (Mac OS X)

This host is installed with Mozilla SeaMonkey and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillaseamonkeymultvuln01apr13macosx.nasl 6065 2017-05-04 09:03:08Z teissa $ Mozilla SeaMonkey Multiple Vulnerabilities -01 Apr13 Mac OS X Authors: Thanga Prakash S Copyright...

Mozilla Firefox and others: Update to Firefox 20.0 release (important)

The Mozilla suite received security and bugfix updates: Mozilla Firefox was updated to version 20.0. Mozilla Thunderbird was updated to version 17.0.5. Mozilla Seamonkey was updated to version 17.0.5. Mozilla XULRunner was updated to version 17.0.5. mozilla-nss was updated to version 3.14.3...

CVE-2013-0794

CVE-2013-0794 affects Mozilla Firefox (pre-20.0) and SeaMonkey (pre-2.17) where origin spoofing of tab-modal dialogs enables phishing via crafted sites. Root cause: tab-modal dialogs did not enforce origin checks, allowing a remote site to spoof the dialog origin. Impact: potential credential/phi...

Slackware: Security Advisory (SSA:2003-300-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-0794

The rc4encrypt function in lib/moodlelib.php in Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 uses a hardcoded password of nfgjeingjk, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by reading this script's...

CVE-2012-0794

The CVE-2012-0794 issue affects Moodle 1.9.x up to 1.9.15, 2.0.x up to 2.0.6, 2.1.x up to 2.1.3, and 2.2.x up to 2.2.0, where rc4encrypt in lib/moodlelib.php uses a hardcoded password (nfgjeingjk). This weak cryptographic protection can be defeated by reading the script’s source code within the d...

Fedora Update for moodle FEDORA-2012-0913

Check for the Version of moodle OpenVAS Vulnerability Test Fedora Update for moodle FEDORA-2012-0913 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Fedora 15 : moodle-1.9.16-1.fc15 (2012-0939)

CVE-2012-0792 CVE-2012-0793 CVE-2012-0794 CVE-2012-0795 CVE-2012-0796 CVE-2012-0797 CVE-2012-0798 CVE-2012-0799 CVE-2012-0800 CVE-2012-0801 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

CVE-2011-0794

CVE-2011-0794 concerns Oracle Outside In Technology, specifically the File ID SDK used by Outside In libraries. Public sources (IBM security bulletin) describe exploitable vulnerabilities in the File ID SDK CAB/CAB-like handling that could allow an unauthenticated remote attacker to execute arbit...

Oracle Releases Critical Patch Update for April 2011

Oracle has released their Critical Patch Update for April 2011 to address 73 vulnerabilities across multiple products. This update contains the following security fixes: 6 updates for the Oracle Database Server 9 updates for Oracle Fusion Middleware 1 update for Oracle Enterprise Manager Grid...