CVE-2012-0934

The CVE-2012-0934 entry describes a Remote File Inclusion in the WordPress Theme Tuner plugin (version before 0.8). The vulnerability occurs in ajax/savetag.php via the tt-abspath parameter, allowing an attacker-controlled URL to be included and arbitrary PHP code to execute on the server. Affect...

CVE-2010-0934

The triggers functionality in Perforce Server 2008.1 allows remote authenticated users with super privileges to execute arbitrary operating-system commands by using a "p4 client" command in conjunction with the form-in trigger script...

CVE-2010-0934

CVE-2010-0934 affects Perforce Server 2008.1, where the triggers functionality can be abused by remote authenticated users with super privileges to execute arbitrary operating-system commands via a p4 client invocation combined with the form-in trigger script. The Red Hat, NVD, and OpenVAS record...

[Backports-security-announce] Security Update for ejabberd

Gerfried Fuchs uploaded new packages for ejabberd which fixed the following security problems: CVE-2009-0934, Debian BTS 520852 Cross-site scripting XSS vulnerability in ejabberd before 2.0.4 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to links and M...

FreeBSD Ports: ejabberd

The remote host is missing an update to the system as announced in the referenced advisory. VID cf91c1e4-2b6d-11de-931b-00e0815b8da8 OpenVAS Vulnerability Test $ Description: Auto generated from VID cf91c1e4-2b6d-11de-931b-00e0815b8da8 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Debian Security Advisory DSA 1774-1 (ejabberd)

The remote host is missing an update to ejabberd announced via advisory DSA 1774-1. OpenVAS Vulnerability Test $Id: deb17741.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1774-1 ejabberd Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Fedora Core 9 FEDORA-2009-2747 (ejabberd)

The remote host is missing an update to ejabberd announced via advisory FEDORA-2009-2747. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

Fedora Core 10 FEDORA-2009-2746 (ejabberd)

The remote host is missing an update to ejabberd announced via advisory FEDORA-2009-2746. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

Fedora Core 9 FEDORA-2009-2747 (ejabberd)

The remote host is missing an update to ejabberd announced via advisory FEDORA-2009-2747. OpenVAS Vulnerability Test $Id: fcore20092747.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-2747 ejabberd Authors: Thomas Reinke Copyright: Copyright c 2009...

CVE-2009-0934

Cross-site scripting XSS vulnerability in ejabberd before 2.0.4 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to links and MUC logs...

CVE-2009-0934

Cross-site scripting XSS vulnerability in ejabberd before 2.0.4 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to links and MUC logs...

CVE-2009-0934

Cross-site scripting XSS vulnerability in ejabberd before 2.0.4 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to links and MUC logs...

CVE-2009-0934

CVE-2009-0934 describes a cross-site scripting (XSS) vulnerability in ejabberd up to version 2.0.4, where remote attackers could inject arbitrary web script or HTML via unknown vectors related to links and MUC logs. Public advisories confirm the issue as remote and require upgrading to a fixed re...

CVE-2008-0934

The CVE-2008-0934 entry documents a SQL injection in the NukeC 2.1 module for PHP-Nuke, exploitable via the id_catg parameter in a ViewCatg action. Affected component/file: modules.php; vulnerability type: SQL injection allowing remote arbitrary SQL execution. Impact details in sources indicate p...

CVE-2007-0934

CVE-2007-0934 is a Microsoft Visio memory-corruption/remote code-execution issue in the version-number handling of Visio files (.VSD/.VSS/.VST). A crafted Visio file could be opened by a user to trigger arbitrary code execution. The related CVE-2007-0936 (Visio Document Packaging) covers improper...

Office Files (CVE-2006-1308; CVE-2006-1540; CVE-2006-3431; CVE-2007-0934; CVE-2007-0936)

...

CVE-2006-0934

CVE-2006-0934 describes a cross-site scripting (XSS) vulnerability in webinsta Limbo 1.0.4.2. The flaw allows remote attackers to inject arbitrary web script or HTML via the message field in the Contact Form. The available sources confirm the vulnerability but do not provide explicit exploit deta...

Detection of various dangerous CGI scripts (HTTP) - Active Check

Various CGI scripts have known vulnerabilities tracked via the via the referenced CVEs. SPDX-FileCopyrightText: 2003 John Lampe Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only Also cove...

CVE-2005-0934

CVE-2005-0934 involves multiple cross-site scripting (XSS) vulnerabilities in WackoWiki R4 . The connected records confirm the affected product and the vulnerability class, indicating that remote attackers can inject arbitrary web script or HTML through unknown vectors in the application. The und...

CVE-2004-0934

CVE-2004-0934 affects Kaspersky antivirus engines 3.x through 4.x. The connected material shows a ZIP archive header manipulation vulnerability where both the local and global headers can be set to zero, allowing the compressed file to be opened while bypassing protection. A PoC exists in ZIP han...