Tiki Wiki CMS Groupware 8.3 - Unserialize() PHP Code Execution

Tiki Wiki CMS Groupware 8.3 - Unserialize PHP Code Execution ?php / ----------------------------------------------------------------- Tiki Wiki CMS Groupware = 8.3 "unserialize" PHP Code Execution ----------------------------------------------------------------- author...........: Egidio Romano a...

CVE-2012-0911

creationtimestamp| type| source ---|---|--- 2012-07-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/19573 2012-07-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/19630 2018-05-29 15:50:33+00:00| seen|...

CVE-2011-0911

Cross-site scripting XSS vulnerability in the Users module in Zikula before 1.2.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: it is possible that this overlaps CVE-2011-0535...

CVE-2011-0911

CVE-2011-0911 (NVD entry) : Affected product is Zikula CMS, specifically the Users module, prior to version 1.2.5. It is described as a Cross-site Scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The root cause is not detai...

CVE-2011-0911

Cross-site scripting XSS vulnerability in the Users module in Zikula before 1.2.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: it is possible that this overlaps CVE-2011-0535...

CVE-2010-0911

CVE-2010-0911 : The Oracle Database Server Listener component is affected by an unspecified vulnerability that allows remote attackers to impact availability via unknown vectors. The CVE is documented with a base CVSS v2 score of 7.8 (HIGH), attack vector Network, no authentication required, and ...

Debian Security Advisory DSA 556-1 (netkit-telnet)

The remote host is missing an update to netkit-telnet announced via advisory DSA 556-1. OpenVAS Vulnerability Test $Id: deb5561.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 556-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

SuSE 10 Security Update : PHP5 (ZYPP Patch Number 2684)

This update fixes security problems also fixed in PHP 5.2.1, including following problems : - Multiple buffer overflows in PHP before 5.2.1 allow attackers to cause a denial of service and possibly execute arbitrary code via unspecified vectors in the 1 session, 2 zip, 3 imap, and 4 sqlite...

CVE-2007-0911

CVE-2007-0911 is an off-by-one bug in PHP 5.2.1’s str_ireplace that can cause a denial of service (crash). The connected advisories confirm this issue as part of a set of PHP 5.x fixes and show that vendors (e.g., SUSE) addressed it with security updates (e.g., SUSE PHP5 patch 2684) and generic O...

CVE-2006-0911

CVE-2006-0911 affects Ipswitch WhatsUp Professional 2006. The vulnerable component is NmService.exe handling requests to Login.asp. The underlying issue is triggered by crafted requests that use the parameters (1) "In]" and (2) "b;tnLogIn", or (3) malformed btnLogIn, potentially involving missing...

CVE-2005-0911

CVE-2005-0911 affects the XOOPS platform, with multiple SQL injection vulnerabilities in index.php. Specifically, the viewcat parameter of index.php and the artid parameter in the viewarticle action are vulnerable, allowing remote attackers to execute arbitrary SQL commands. The description indic...

CVE-2004-0911

telnetd for netkit 0.17 and earlier, and possibly other versions, on Debian GNU/Linux allows remote attackers to cause a denial of service free of an invalid pointer, a different vulnerability than CVE-2001-0554...

CVE-2004-0911

telnetd for netkit 0.17 and earlier, and possibly other versions, on Debian GNU/Linux allows remote attackers to cause a denial of service free of an invalid pointer, a different vulnerability than CVE-2001-0554...

CVE-2004-0911

telnetd for netkit 0.17 and earlier, and possibly other versions, on Debian GNU/Linux allows remote attackers to cause a denial of service free of an invalid pointer, a different vulnerability than CVE-2001-0554...

[SECURITY] [DSA 556-2] New netkit-telnet packages really fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 556-2 [email protected] http://www.debian.org/security/ Martin Schulze XXXXX 8th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 556-1] New netkit-telnet packages fix invalid free

-------------------------------------------------------------------------- Debian Security Advisory DSA 556-1 [email protected] http://www.debian.org/security/ Matt Zimmerman October 2nd, 2004 http://www.debian.org/security/faq -...

CVE-2004-0911

CVE-2004-0911 pertains to the netkit-telnet/ telnetd remote denial of service via an invalid free (CAN-2004-0911). Multiple feeds document a bug in the telnetd server used with netkit-telnet (notably in Debian/woody and related releases) where remote attackers could crash the telnetd process or p...

CVE-2004-0911

telnetd for netkit 0.17 and earlier, and possibly other versions, on Debian GNU/Linux allows remote attackers to cause a denial of service free of an invalid pointer, a different vulnerability than CVE-2001-0554...

CVE-2004-0911

telnetd for netkit 0.17 and earlier, and possibly other versions, on Debian GNU/Linux allows remote attackers to cause a denial of service free of an invalid pointer, a different vulnerability than CVE-2001-0554...

CVE-2002-0911

Caldera Volution Manager 1.1 stores the Directory Administrator password in cleartext in the slapd.conf file, enabling local users to gain privileges. Affected product: Caldera Volution Manager 1.1. Root cause: password stored in plaintext in slapd.conf. Impact (as stated): local privilege escala...