cpCommerce 1.2.8 Blind SQL Injection

========================================================================================== o cpCommerce 1.2.8 Blind SQL Injection Vulnerability Software : cpCommerce version 1.2.8 Vendor : http://cpcommerce.cpradio.org/ Download : http://cpcommerce.cpradio.org/downloads.php Author : NoGe Contact ...

cpCommerce 1.2.8 (id_document) Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ cpCommerce 1.2.8 iddocument Blind SQL Injection Vulnerability ================================================================...

CPCommerce 1.2.8 - 'id_document' Blind SQL Injection

========================================================================================== o cpCommerce 1.2.8 Blind SQL Injection Vulnerability Software : cpCommerce version 1.2.8 Vendor : http://cpcommerce.cpradio.org/ Download : http://cpcommerce.cpradio.org/downloads.php Author : NoGe Contact ...

Multiple vulnerabilities in third party extensions

Several vulnerabilities have been found in the following third party TYPO3 extensions: "A21glossary Advanced Output" a21glossaryadvancedoutput, "ClickStream Analyzer output" alternetcsaout, "Directory Listing" dirlisting, "Store Locator" locator, "Userdata Create/Edit" sguserdata, "Versatile...

libspf2 DNS TXT record parsing buffer overflow

Overview libspf2 contains a buffer overflow vulnerability in code that parses DNS TXT records. Description libspf2 is a widely-deployed implementation of the Sender Policy Framework. According to RFC 4408: An SPF record is a DNS Resource Record RR that declares which hosts are, and are not,...

CVE-2008-2196

Cross-site scripting XSS vulnerability in admin.php in LifeType 1.2.8 allows remote attackers to inject arbitrary web script or HTML via the newBlogUserName parameter in an addBlogUser action, a different vector than CVE-2008-2178...

CVE-2008-2196

Cross-site scripting XSS vulnerability in admin.php in LifeType 1.2.8 allows remote attackers to inject arbitrary web script or HTML via the newBlogUserName parameter in an addBlogUser action, a different vector than CVE-2008-2178...

CVE-2008-2196

The CVE-2008-2196 entry concerns a Cross-Site Scripting (XSS) flaw in LifeType; specifically admin.php handles addBlogUser via the newBlogUserName parameter (LifeType 1.2.8). The vulnerability allows remote attackers to inject arbitrary script/HTML, a vector distinct from CVE-2008-2178. Public re...

Debian Security Advisory DSA 191-1 (squirrelmail)

The remote host is missing an update to squirrelmail announced via advisory DSA 191-1. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

SuSE 10 Security Update : xsupplicant (ZYPP Patch Number 2455)

xsupplicant has been upgraded to version 1.2.8, which includes bugfixes and one security fix : - A post-authentication stack overflow in the EAP handling could be used by already authenticated attacker to overflow a stackbuffer and so potentially execute code. CVE-2006-5601 %NASLMINLEVEL 70300 C...

CVE-2007-6201

Unspecified vulnerability in Wesnoth 1.2.x before 1.2.8, and 1.3.x before 1.3.12, allows attackers to cause a denial of service hang via a "faulty add-on" and possibly execute other commands via unknown vectors related to the turncmd option...

Security fix for the ALT Linux 7 package apr1 version 1.2.8-alt1.2

June 14, 2007 Aleksey Avdeev 1.2.8-alt1.2 - NMU: + adding apr-1.2.8-asf-aprtableclone.patch: add table copy clone function for apr, for CVE-2007-1862 fix see &LThttp://issues.apache.org/bugzilla/showbug.cgi?id=41551 and &LThttp://issues.apache.org/bugzilla/attachment.cgi?id=20150...

Security fix for the ALT Linux 8 package apache2 version 2.2.4-alt26

June 14, 2007 Aleksey Avdeev 2.2.4-alt26 - Fix CVE-2007-1862 see &LThttp://issues.apache.org/bugzilla/showbug.cgi?id=41551 + use apache2-2.2.4-asc-fix-CVE-2007-1862-0.1.patch + add Requires libapr1-devel = 1.2.8-alt1.2...

Fedora Core 5 : libXfont-1.2.8-1.fc5 (2007-422)

Fri Apr 6 2007 Adam Jackson 1.2.8-1 - libXfont 1.2.8. - Wed Jan 17 2007 Kristian Hagsberg 1.2.6-2 - Add built-in-scalable.patch to prevent crash when trying to scale built-in bitmap fonts. - Fri Jan 5 2007 Adam Jackson 1.2.6-1 - Update to 1.2.6 - Fri Dec 1 2006 Adam Jackson 1.2.5-1 - Update to...

Apache Struts Error Response Cross-Site Scripting Vulnerability

Struts is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the...

CVE-2005-3079

PunBB before 1.2.8 allows remote attackers to perform "code inclusion" via the user language selection...

CVE-2005-3079

PunBB before 1.2.8 is affected by a file-inclusion vulnerability triggered via the user language selection, allowing an attacker with an account to cause PHP code execution or read local files. The Nessus plugin details a broader set of flaws, including a similar file-inclusion path that can exec...

PT-2004-1848 · Mit · Mit Kerberos 5

Name of the Vulnerable Software and Affected Versions: MIT Kerberos 5 krb5 versions 1.2.8 and earlier Description: The issue is related to double free vulnerabilities in error handling code in krb524d, which may allow remote attackers to execute arbitrary code. Recommendations: For MIT Kerberos 5...

CVE-2002-1276

An incomplete fix for a cross-site scripting XSS vulnerability in SquirrelMail 1.2.8 calls the striptags function on the PHPSELF value but does not save the result back to that variable, leaving it open to cross-site scripting attacks...

CVE-2002-1276

CVE-2002-1276 concerns SquirrelMail XSS due to an incomplete fix in version 1.2.8 where strip_tags is applied to PHP_SELF but not saved back, leaving room for injection. OpenVAS notes the read_body.php path (SquirrelMail 1.2.9/1.2.10) as vulnerable to multiple parameter XSS. Debian security advis...