CentOS Security Advisory CESA-2009:1427 (fetchmail)

The remote host is missing updates to fetchmail announced in advisory CESA-2009:1427. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

CentOS Security Advisory CESA-2009:1427 (fetchmail)

The remote host is missing updates to fetchmail announced in advisory CESA-2009:1427. CESA-2009:1427 64900 8 $Id: ovcesa20091427.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:1427 fetchmail Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

CVE-2008-1427

The Acajoom component for Joomla! (Joobi) software, specifically com_acajoom versions 1.1.5 and 1.2.5, is vulnerable to SQL injection via the mailingid parameter in the mailing view action (index.php). Root cause: improper sanitization in class.mailing.php and getOneMailing(). Impact: potential d...

Debian: Security Advisory (DSA-1427-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2003-1427

Affected product: Netgear FM114P (firmware 1.4) web configuration interface. Vulnerability: Directory traversal via a hex-encoded (../../ )../ in the port parameter, allowing remote attackers to read arbitrary files (e.g., netgear.cfg). Root cause: Insufficient validation of the port parameter en...

CVE-2007-1427

Directory traversal vulnerability in downloadpdf.php in AssetMan 2.4a and earlier allows remote attackers to read arbitrary files via a .. dot dot in the pdffile parameter...

CVE-2007-1427

CVE-2007-1427 describes a directory traversal vulnerability in AssetMan 2.4a and earlier, located in download_pdf.php. The issue arises from the pdf_file parameter, where a .. (dot dot) path traversal allows a remote attacker to read arbitrary files on the server. The entry notes impact as readin...

CVE-2006-1427

CVE-2006-1427 involves multiple cross-site scripting (XSS) vulnerabilities in WebAPP 0.9.9.3.2 and earlier. The affected component is the web application’s CGI interfaces, specifically cgi-bin/index.cgi (parameters: action, id, num, board, cat, real, viewcat, img, curcatname) and /mods/calendar/i...

CVE-2005-1427

Affected component: Uapplication Uphotogallery. Vulnerability: storing the database under the web document root allows remote attackers to access sensitive data via a direct request to uphotogallery.mdb. Impact: exposure of information (confidentiality impact Partial; per CVSS). Notes: the provid...

CVE-2001-1427

Technical details of CVE-2001-1427 are not publicly available in the provided documents. Please monitor for updates from official advisories; current sources describe an unknown vulnerability in ColdFusion Server 2.0–4.5.1 SP2 without specifics.

CVE-2004-1427

KorWeblog PHP remote file inclusion vulnerability (CVE-2004-1427) affects 1.6.2-cvs and earlier. The flaw is in main.inc via G_PATH, enabling remote code execution when a URL on a remote server is loaded, demonstrated by using .. sequences in the lng parameter to load main.inc. The CVSS vector (A...

CVE-2003-1427

Directory traversal vulnerability in the web configuration interface in Netgear FM114P 1.4 allows remote attackers to read arbitrary files, such as the netgear.cfg configuration file, via a hex-encoded %2e%2e%2f ../ dot dot slash in the port parameter...

CVE-2002-1427

The CVE-2002-1427 entry affects Easy Homepage Creator 1.0. The print_html_to_file function in edit.cgi does not validate user credentials, enabling remote attackers to modify other users’ home pages. CVSS v2 data reports a base score of 7.5 ( HIGH ) with network attack vector, no authentication, ...

CVE-2002-1427

The printhtmltofile function in edit.cgi for Easy Homepage Creator 1.0 does not check user credentials, which allows remote attackers to modify home pages of other users...

CVE-1999-1427

Affected software: Solaris Solstice AdminSuite (AdminSuite) 2.1 and 2.2. Vulnerability: insecure creation of lock files. Root cause: insecure lock file handling allows local users to gain root privileges. Impact: local privilege escalation to root on affected systems. Remediation: not provided in...