CentOS Security Advisory CESA-2009:1459 (cyrus-imapd)

The remote host is missing updates to cyrus-imapd announced in advisory CESA-2009:1459. CESA-2009:1459 64989 4 $Id: ovcesa20091459.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:1459 cyrus-imapd Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...

CentOS Security Advisory CESA-2009:1459 (cyrus-imapd)

The remote host is missing updates to cyrus-imapd announced in advisory CESA-2009:1459. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

CVE-2009-1459

Cross-site request forgery CSRF vulnerability in razorCMS before 0.4 allows remote attackers to hijack the authentication of administrators for requests that create a web page containing PHP code...

CVE-2009-1459

The CVE-2009-1459 issue targets razorCMS with a Cross‑Site Request Forgery vulnerability in versions before 0.4. The flaw allows an attacker to hijack an administrator’s session and perform actions that create a web page containing PHP code, potentially impacting authentication and content integr...

FreeBSD Ports: ethereal*, tethereal*

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2008-1459

CVE-2008-1459 describes an SQL injection vulnerability in the Alberghi component (com_alberghi) for Mambo/Joomla! up to version 2.1.3. The vulnerability allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php. The affected software is Albergh...

CVE-2008-1459

SQL injection vulnerability in the Alberghi comalberghi 2.1.3 and earlier component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php...

CVE-2008-1459

creationtimestamp| type| source ---|---|--- 2008-03-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5278...

Fedora 8 : seamonkey-1.1.8-1.fc8 (2008-1459)

Fri Feb 8 2008 Kai Engert - 1.1.8-1 - SeaMonkey 1.1.8 - Sun Dec 2 2007 Kai Engert - 1.1.7-1 - SeaMonkey 1.1.7 - Mon Nov 5 2007 Kai Engert - 1.1.6-1 - SeaMonkey 1.1.6 - Fri Oct 19 2007 Kai Engert - 1.1.5-2 - SeaMonkey 1.1.5 Note that Tenable Network Security has extracted the preceding description...

Debian Security Advisory DSA 1459-1 (gforge)

The remote host is missing an update to gforge announced via advisory DSA 1459-1. OpenVAS Vulnerability Test $Id: deb14591.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1459-1 gforge Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian DSA-1459-1 : gforge - insufficient input validation

It was discovered that Gforge, a collaborative development tool, did not properly sanitise some CGI parameters, allowing SQL injection in scripts related to RSS exports. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

CVE-2003-1459

CVE-2003-1459 affects ttCMS 2.2 and ttForum, with multiple PHP remote file inclusion vulnerabilities. The issue allows remote attackers to execute arbitrary PHP code via (1) the template parameter in News.php or (2) the installdir parameter in install.php. Exploitation details indicate that this ...

CVE-2007-1459

CVE-2007-1459 affects WebCreator 0.2.6-rc3 and earlier, enabling PHP remote file inclusion via the moddir parameter to content/load.inc.php, config/load.inc.php, http/load.inc.php, and other files. The underlying issue allows remote attackers to execute arbitrary PHP code on affected installation...

CentOS 3 / 4 : ethereal (CESA-2005:427)

Updated Ethereal packages that fix various security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The ethereal package is a program for monitoring network traffic. A number of security flaws have been...

CVE-2005-1459

Ethereal (now Wireshark) has multiple remote‑code-execution/denial of service vulnerabilities in its dissectors (WSP, BER, SMB, NDPS, IAX2, RADIUS, TCAP, MRDISC, 802.3 Slow, SMBMailslot, SMB PIPE) prior to version 0.10.11. The CVE set CVE-2005-1456 through CVE-2005-1470 is cited for these issues....

CVE-2001-1459

OpenSSH

CVE-2004-1459

The CVE refers to Cisco Secure Access Control Server (ACS) 3.2 when configured as a Light EAP (LEAP) RADIUS proxy. The vulnerability allows remote attackers to trigger a denial of service (device crash) by sending certain LEAP authentication requests. The available documents confirm the affected ...

CVE-2002-1459

Cross-site scripting vulnerability in L-Forum 2.40 and earlier, when the "Enable HTML in messages" option is off, allows remote attackers to insert arbitrary script or HTML via message fields including 1 From, 2 E-Mail, and 3 Subject...

CVE-2002-1459

CVE-2002-1459 is a cross-site scripting vulnerability in L-Forum versions 2.40 and earlier, where the option “Enable HTML in messages” off allows remote insertion of script/HTML via From, E‑Mail, or Subject fields. Root cause: insufficient input validation/escaping in message fields. According to...

CVE-2002-1459

Cross-site scripting vulnerability in L-Forum 2.40 and earlier, when the "Enable HTML in messages" option is off, allows remote attackers to insert arbitrary script or HTML via message fields including 1 From, 2 E-Mail, and 3 Subject...