openSUSE Security Update : apache2-mod_php5 (openSUSE-SU-2011:0645-1)

This php5 update fixes : - CVE-2011-0421: CVSS v2 Base Score: 2.6 AV:N/AC:H/Au:N/C:N/I:N/A:P: Input Validation CWE-20 - CVE-2011-1092: CVSS v2 Base Score: 5.1 AV:N/AC:H/Au:N/C:P/I:P/A:P: Numeric Errors CWE-189 - CVE-2011-1148: CVSS v2 Base Score: 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P: Resource Managemen...

Oracle Linux 5 / 6 : php53 / and / php (ELSA-2011-1423)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-1423 advisory. - improve CVE-2011-1466 fix to cover CALGREGORIAN, CALJEWISH Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 6 : php (ELSA-2012-1046)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-1046 advisory. - add security fix for CVE-2010-2950 - fix tests for CVE-2012-2143, CVE-2012-0789 - add fix for CVE-2012-2336 - add security fixes for CVE-2012-0781,...

Oracle Linux 5 : php (ELSA-2012-0033)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0033 advisory. 5.1.6-27.4 - add security fixes for CVE-2011-4885, CVE-2011-4566, CVE-2011-0708, CVE-2011-1148, CVE-2011-1466, CVE-2011-1469, CVE-2011-2202 769756...

CVE-2013-1469

Directory traversal vulnerability in install.php in Piwigo before 2.4.7 allows remote attackers to read and delete arbitrary files via a .. dot dot in the dl parameter...

CVE-2013-1469

CVE-2013-1469 affects Piwigo where install.php uses the dl parameter, allowing directory traversal to read and delete arbitrary files. The vulnerability is described as a directory traversal issue in Piwigo versions prior to 2.4.7. Connected advisories and scans corroborate that this is a file-ac...

Multiple Vulnerabilities in Piwigo

Advisory ID: HTB23144 Product: Piwigo Vendor: Piwigo project Vulnerable Versions: 2.4.6 and probably prior Tested Version: 2.4.6 Vendor Notification: February 6, 2013 Vendor Patch: February 19, 2013 Public Disclosure: February 27, 2013 Vulnerability Type: Cross-Site Request Forgery CWE-352, Path...

Piwigo 2.4.6 - Multiple Vulnerabilities

Piwigo 2.4.6 - Multiple Vulnerabilities Advisory ID: HTB23144 Product: Piwigo Vendor: Piwigo project Vulnerable Versions: 2.4.6 and probably prior Tested Version: 2.4.6 Vendor Notification: February 6, 2013 Vendor Patch: February 19, 2013 Public Disclosure: February 27, 2013 Vulnerability Type:...

Piwigo 2.4.6 - Multiple Vulnerabilities

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Piwigo, which can be exploited to perform Сross-Site Request Forgery and Path Traversal attacks. Advisory Details: High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Piwigo, whic...

Piwigo 2.4.6 Cross Site Request Forgery / Traversal Vulnerabilities

Piwigo version 2.4.5 suffers from cross site request forgery and path traversal vulnerabilities. Product: Piwigo Vendor: Piwigo project Vulnerable Versions: 2.4.6 and probably prior Tested Version: 2.4.6 Vendor Notification: February 6, 2013 Vendor Patch: February 19, 2013 Public Disclosure:...

Piwigo 2.4.6 - Multiple Vulnerabilities

Advisory ID: HTB23144 Product: Piwigo Vendor: Piwigo project Vulnerable Versions: 2.4.6 and probably prior Tested Version: 2.4.6 Vendor Notification: February 6, 2013 Vendor Patch: February 19, 2013 Public Disclosure: February 27, 2013 Vulnerability Type: Cross-Site Request Forgery CWE-352, Path...

Piwigo 2.4.6 Cross Site Request Forgery / Traversal

Advisory ID: HTB23144 Product: Piwigo Vendor: Piwigo project Vulnerable Versions: 2.4.6 and probably prior Tested Version: 2.4.6 Vendor Notification: February 6, 2013 Vendor Patch: February 19, 2013 Public Disclosure: February 27, 2013 Vulnerability Type: Cross-Site Request Forgery CWE-352, Path...

CVE-2012-1469

CVE-2012-1469 corresponds to multiple XSS vulnerabilities in Open Journal Systems (OJS) up to version 2.3.6, affecting the iBrowser component (lib/pkp/lib/tinymce/jscripts/tiny_mce/plugins/ibrowser/ibrowser.php) and input fields (editor/callback, authors[][url], Bio Statement, Abstract of Submiss...

CentOS Update for php53 CESA-2011:1423 centos5 x86_64

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Ubuntu: Security Advisory (USN-1469-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PHP 5.3 < 5.3.6 Multiple Vulnerabilities

PHP is prone to multiple vulnerabilities. Copyright C 2012 NopSec Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or...

Ubuntu 10.04 LTS : linux-ec2 vulnerability (USN-1469-1)

Schacher Raindel discovered a flaw in the Linux kernel's memory handling when hugetlb is enabled. An unprivileged local attacker could exploit this flaw to cause a denial of service and potentially gain higher privileges. Note that Tenable Network Security has extracted the preceding description...

Multiple vulnerabilities in Open Journal Systems &#40;OJS&#41;

Advisory ID: HTB23079 Product: Open Journal Systems OJS Vendor: Public Knowledge Project Vulnerable Versions: 2.3.6 and probably prior Tested Version: 2.3.6 Vendor Notification: 29 February 2012 Vendor Patch: 16 March 2012 Public Disclosure: 21 March 2012 Vulnerability Type: Arbitrary File...

Open Journal Systems 2.3.6 XSS / File Manipulation / Shell Upload

Advisory ID: HTB23079 Product: Open Journal Systems OJS Vendor: Public Knowledge Project Vulnerable Versions: 2.3.6 and probably prior Tested Version: 2.3.6 Vendor Notification: 29 February 2012 Vendor Patch: 16 March 2012 Public Disclosure: 21 March 2012 Vulnerability Type: Arbitrary File...

CVE-2012-1469

creationtimestamp| type| source ---|---|--- 2012-03-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37000 2012-03-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36999...