CVE-2009-1410

The CVE-2009-1410 issue concerns Quick.Cms.Lite 0.5 where an SQL injection vulnerability exists in index.php, exploitable via the id parameter to execute arbitrary SQL commands. Affected component: Quick.Cms.Lite 0.5; vulnerability originates from unsafely handled id input in index.php. Reported ...

CVE-2009-1410

creationtimestamp| type| source ---|---|--- 2009-04-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8505...

Gentoo Security Advisory GLSA 200505-12 (postgresql)

The remote host is missing updates announced in advisory GLSA 200505-12. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

FreeBSD Ports: postgresql

The remote host is missing an update to the system as announced in the referenced advisory. VID 486aff57-9ecd-11da-b410-000e0c2e438a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: postgresql

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2008-1410

CVE-2008-1410 affects Acronis Snap Deploy 2.0.0.1076 and earlier, where the PXE Server (pxesrv.exe) is vulnerable to directory traversal via the TFTP service. This allows remote attackers to read arbitrary files from the affected system. The vulnerability is documented with a CVSSv2 base score of...

CVE-2008-1410

creationtimestamp| type| source ---|---|--- 2008-03-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5228...

Debian Security Advisory DSA 1410-1 (ruby1.8)

The remote host is missing an update to ruby1.8 announced via advisory DSA 1410-1. OpenVAS Vulnerability Test $Id: deb14101.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1410-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian: Security Advisory (DSA-1410-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1410-1 : ruby1.8 - programming error

Several vulnerabilities have been discovered in Ruby, an object-oriented scripting language. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-5162 It was discovered that the Ruby HTTPS module performs insufficient validation of SSL certificates, whic...

CVE-2003-1410

The CVE-2003-1410 entry refers to a PHP remote file inclusion in Cedric Email Reader (versions 0.2 and 0.3) where the cer_skin parameter in email.php (aka email.php3) can allow an attacker to execute arbitrary PHP code. Connected documents confirm the affected software and the vulnerability class...

CVE-2007-1410

The CVE-2007-1410 entry describes a SQL injection in the GaziYapBoz Game Portal, specifically via the kategori.asp parameter. The underlying issue is improper handling of the kategori parameter, allowing remote attackers to execute arbitrary SQL commands. The published data indicate an in-the-wil...

RHEL 4 : postgresql (RHSA-2005:433)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:433 advisory. PostgreSQL is an advanced Object-Relational database management system DBMS that supports almost all SQL constructs including transactions,...

postgresql, rh security update

CentOS Errata and Security Advisory CESA-2005:433 Updated postgresql packages that fix several security vulnerabilities and risks of data loss are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PostgreSQL is an advanced...

USN-118-1: PostgreSQL vulnerabilities

It was discovered that unprivileged users were allowed to call internal character conversion functions. However, since these functions were not designed to be safe against malicious choices of argument values, this could potentially be exploited to execute arbitrary code with the privileges of th...

CVE-2005-1410

The connected documents confirm CVE-2005-1410 affects the PostgreSQL tsearch2 module (versions 7.4–8.0.x). The root cause is misdeclaring several tsearch2 functions as internal when they do not take an internal argument, enabling SQL calls to other internal-argument functions and potentially caus...

CVE-2004-1410

CVE-2004-1410 is a documented XSS in Gadu-Gadu builds up to 155, via a URL echoed in a parsing-error popup. The connected CVE-2004-1229 describes a different XSS vulnerability in the same Gadu-Gadu parser, triggered by URLs (http:// or news://). The affected software is the Gadu-Gadu client; the ...

CVE-2004-1410

Cross-site scripting XSS vulnerability in Gadu-Gadu build 155 and earlier allows remote attackers to inject arbitrary web script via a URL, which is echoed in a popup window that displays a parsing error message, a different vulnerability than CVE-2004-1229...

CVE-2003-1410

PHP remote file inclusion vulnerability in email.php aka email.php3 in Cedric Email Reader 0.2 and 0.3 allows remote attackers to execute arbitrary PHP code via the cerskin parameter...

CVE-2001-1410

Internet Explorer 6 and earlier allows remote attackers to create chromeless windows using the Javascript window.createPopup method, which could allow attackers to simulate a victim's display and conduct unauthorized activities or steal sensitive data via social engineering...