FreeBSD Ports: icecast

The remote host is missing an update to the system as announced in the referenced advisory. VID 5e92e8a2-5d7b-11d8-80e3-0020ed76ef5a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

CVE-2008-1230

CVE-2008-1230 describes an unrestricted file upload vulnerability in JSPWiki 2.4.104 and 2.5.139, where remote attackers can upload and execute arbitrary .jsp files by an unspecified manipulation that attaches a .jsp file to an “entry page.” This set of connected documents confirms the affected s...

Unfixed XSS vulnerability at www.ifilm.com

Security researcher MaXWeL, has submitted on 19/05/2007 a cross-site-scripting XSS vulnerability affecting www.ifilm.com, which at the time of submission ranked 1230 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/05/2007. It is currently...

CVE-2007-1230

WordPress prior to 2.1.2-alpha contains cross-site scripting (XSS) vulnerabilities in wp-includes/functions.php. The issue allows remote attackers to inject arbitrary web script or HTML via the Referer HTTP header or the URI. This is the same family noted in CVE-2007-1230/1049 and is documented a...

CVE-2007-1230

Multiple cross-site scripting XSS vulnerabilities in wp-includes/functions.php in WordPress before 2.1.2-alpha allow remote attackers to inject arbitrary web script or HTML via 1 the Referer HTTP header or 2 the URI, a different vulnerability than CVE-2007-1049...

Debian DSA-1230-1 : l2tpns - buffer overflow

Rhys Kidd discovered a vulnerability in l2tpns, a layer 2 tunnelling protocol network server, which could be triggered by a remote user to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...

CVE-2006-2810

Multiple cross-site scripting XSS vulnerabilities in Belchior Foundry vCard 2.9 allow remote attackers to inject arbitrary web script or HTML via the page parameter in 1 toprated.php and 2 newcards.php. NOTE: the cardid vector is already covered by CVE-2006-1230...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Belchior Foundry vCard 2.9 allow remote attackers to inject arbitrary web script or HTML via the page parameter in 1 toprated.php and 2 newcards.php. NOTE: the cardid vector is already covered by CVE-2006-1230...

CVE-2006-2810

Multiple cross-site scripting XSS vulnerabilities in Belchior Foundry vCard 2.9 allow remote attackers to inject arbitrary web script or HTML via the page parameter in 1 toprated.php and 2 newcards.php. NOTE: the cardid vector is already covered by CVE-2006-1230...

CVE-2006-1230

Multiple cross-site scripting XSS vulnerabilities in create.php in vCard 2.x allow remote attackers to inject arbitrary web script or HTML via the 1 cardid, 2 uploaded, 3 cardfontsize, or 4 cardcolor parameter. NOTE: the cardid vector was later reported to affect vCard 2.9, and the uploaded vecto...

CVE-2006-1230

CVE-2006-1230 describes multiple cross-site scripting (XSS) flaws in create.php of vCard 2.x, allowing remote injection of arbitrary script/HTML via (1) card_id, (2) uploaded, (3) card_fontsize, or (4) card_color parameters. The note indicates the card_id vector was later reported to affect vCard...

WM_TIMER Message Handler Privilege Elevation (Q328310)

A security issue has been identified in WMTIMER that could allow an attacker to compromise a computer running Microsoft Windows and gain complete control over it. SPDX-FileCopyrightText: 2002 Michael Scheidell Some text descriptions might be excerpted from a referenced sources, and are Copyright ...

CVE-2000-1230

The CVE-2000-1230 entry concerns Phorum 3.0.7, where a backdoor in auth.php3 allows remote attackers to access restricted web pages by sending an HTTP request with the PHP_AUTH_USER parameter set to boogieman. This describes a vulnerable component (auth.php3) and a clear attack vector (HTTP-based...

CVE-2005-1230

Yawcam 0.2.5 is vulnerable to a directory traversal flaw in the web server, allowing remote attackers to read files outside the web root via ..\ sequences in a GET request. Affected: Yawcam web server; root cause: improper handling of path traversal. Impact: potential disclosure of arbitrary file...

CVE-2004-1230

Gadu-Gadu allows remote attackers to gain sensitive information and read files from the cache directory of other users via a DCC connection and a CTCP packet that contains a 1 as the type and a 4 as the subtype...

CVE-2004-1230

CVE-2004-1230 pertains to the Gadu-Gadu client. A remote attacker can exploit a DCC connection and a CTCP packet with type=1, subtype=4 to read files from another user’s _cache directory and obtain sensitive information. The vulnerability affects Gadu-Gadu as described in public records; the core...

CVE-2002-1230

CVE-2002-1230 affects Windows NT 4.0/Terminal Server Edition, Windows 2000, and Windows XP via NetDDE Agent exploiting a WM_TIMER handling flaw. An untrusted WM_TIMER sequence (after WM_COPYDATA) could trigger arbitrary code execution with LocalSystem privileges, as described in MS02-071. The vul...

CVE-2002-1230

NetDDE Agent on Windows NT 4.0, 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows local users to execute arbitrary code as LocalSystem via "shatter" style attack by sending a WMCOPYDATA message followed by a WMTIMER message, as demonstrated by GetAd, aka "Flaw in Windows WMTIMER...

CVE-2002-1230

NetDDE Agent on Windows NT 4.0, 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows local users to execute arbitrary code as LocalSystem via "shatter" style attack by sending a WMCOPYDATA message followed by a WMTIMER message, as demonstrated by GetAd, aka "Flaw in Windows WMTIMER...

CVE-2001-1230

CVE-2001-1230 affects Icecast before 1.3.10. The OpenVAS/NVD data describe a remote buffer overflow in Icecast that allows a remote attacker to crash the server and potentially execute arbitrary code with the server’s privileges. Several advisories (e.g., Debian DSA-089-1/DSA-089-2) and OpenVAS p...